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Abstract: 


The thesis developed here is that reasoning programs which take care to record 
the logical justifications for program beliefs can apply several powerful, but simple, domain- 
independent algorithms to 

{1} maintain the consistency of program beliefs, 

{2} realize substantial search efficiencies, and 

{3} automatically summarize explanations of program beliefs. 

These algorithms use the recorded justifications to maintain the consistency and well- 
founded basis of the set of beliefs. The set of beliefs can be efficiently updated in an 
incremental manner when hypotheses are retracted and when new information is discovered. 
The recorded justifications also enable the pinpointing of exactly those assumptions which 
support any particular belief. The ability to pinpoint the underlying assumptions is the 
basis for an extremely powerful domain-independent backtracking method. This method, 
called Dependency-Directed Backtracking, offers vastly improved performance over 
traditional backtracking algorithms. 

These techniques of recording and using justifications also indicate methods for 
structuring the deductive process so that the justification-derived arguments for certain 
types of deductions can be automatically summarized. The levels of detail in a hierarchical 
problem solver can be separated from each other by this summarization. The separation is 
accomplished by replacing a set of beliefs at one level by the higher-level beliefs from which 
they derive. This is important in improving the coherence of explanations, and in further 
improving the search efficiency of dependency-directed backtracking. Modest extensions of 
this method are useful in automatically generalizing the results of certain forms of 
computations. 

This report describes techniques for representing, recording, maintaining and 
using justifications for beliefs. In addition, we present an annotated implementation of a 
domain-independent program making these functions easily available to programs in a wide 
range of applications. 


Thesis Supervisor: Gerald Jay Sussman 
Title: Esther and Harold E. Edgerton Associate Professor 
of Electrical Engineering and Computer Science 
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I. Introduction 


A. Overview of the Report 


The thesis developed here is that reasoning programs which take care to record 
the logical justifications for program beliefs can apply several powerful, but simple, domain- 
independent algorithms to 

{1} maintain the consistency of program beliefs, 

{2} realize substantial search efficiencies, and 

{3} automatically summarize explanations of program beliefs. 

These algorithms use the recorded justifications to maintain the consistency and well- 
founded basis of the set of beliefs. The set of beliefs can be efficiently updated in an 
incremental manner when hypotheses are retracted and when new information is discovered. 
The recorded justifications also enable the pinpointing of exactly those assumptions which 
support any particular belief. The ability to pinpoint the underlying assumptions is the 
basis for an extremely powerful domain-independent backtracking method. This method, 
called Dependency-Directed Backtracking, offers vastly improved performance over 
traditional backtracking algorithms. 

These techniques of recording and using justifications also indicate methods for 
structuring the deductive process so that the justification-derived arguments for certain 
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types of deductions can be automatically summarized. The levels of detail in a hierarchical 
problem solver can be separated from each other by this summarization. The separation is 
accomplished by replacing a set of beliefs at one level by the higher-level beliefs from which 
they derive. This is important in improving the coherence of explanations, and in further 
improving the search efficiency of dependency-directed backtracking. Modest extensions of 
this method are useful in automatically generalizing the results of certain forms of 
computations. 

This report describes techniques for representing, recording, maintaining and 
using justifications for beliefs. In addition, we present an annotated implementation of a 
domain-independent program making these functions easily available to programs in a wide 
range of applications. 

The first chapter of the report introduces the function and operation of the Truth 
Maintenance System (TMS). This is a particular domain-independent program embodying 
the techniques described in the remainder of this report. An example of problem solving 
using the TMS is presented to lend substance to the following discussion. 

The second chapter develops a new method for representing knowledge about 
beliefs. This representation, called a non-monotonic dependency system, is closely related to 
representations used in certain methods of natural deduction. It extends these 
representations by incorporating the ability to represent non-monotonic dependencies. Non- 
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monotonic dependencies can be used to express certain forms of hypothetical assumptions, as 
well as ordinary deductions and conditional proofs. This representation is invaluable in 
maintaining the consistency of program beliefs in the presence of assumptions and in 
dependency-directed backtracking. The discussion then presents methods for using this 
representation in describing several common problem solving structures. These include 
default assumptions, sets of alternatives, and equivalence class representatives. Finally, a 
method for imposing a hierarchical structure of summarizations on arguments for beliefs is 
described. 


The third chapter details the mechanisms behind the techniques of the preceding 
chapter. An important problem in using justifications to determine the set of current beliefs 
is the occurrence of circular proofs for beliefs. The solution of this problem requires the 
maintenance of well-founded support for all program beliefs. The chapter discusses this 
problem and the mechanism of truth maintenance used to incrementally derive well-founded 
support for beliefs following the addition of new justifications and the retraction of 
premises. Mechanisms for handling conditional proofs are then described. These involve a 
mechanization of the deduction theorem of mathematical logic to find the grounds for belief 
in an implication. Conditional proofs play a major role in the following presentation of the 
mechanism of dependency-directed backtracking. 

The final chapter provides a summary discussion of the key ideas developed in 
the report: the importance and uses of recorded justifications for beliefs. This summary is 
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followed by discussions of the relation of this research to other work, and a list of topics for 
future research. 

Three appendices provide information on other topics. The first appendix 
contains a glossary of the concepts and terms employed in our discussion of truth 
maintenance systems. The second appendix outlines the structure and mechanisms of a 
related representational system, the monotonic dependency system. This representation 
allows a simplification of the algorithms used in truth maintenance over the corresponding 
algorithms used in the non-monotonic system. However, the monotonic system requires 
substantial additional complexities on the part of other algorithms. In particular, 
hypothetical assumptions and dependency-directed backtracking require other mechanisms 
for their implementation. The third appendix presents an annotated implementation of a 
version of the TMS program. 

Footnotes are indicated in this report by a superscript, mnemonic. The notes 
themselves, indexed by these mnemonics, are located immediately preceding the references. 
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B. A Functional Description of the Truth Maintenance System 

The Truth Maintenance System is a program for recording knowledge about 
deductions. A reasoning program interacts with the TMS by distinguishing a set of 
program structures as describing the set of program beliefs. These structures are typically 
those derived by program operation, and then used to derive further such structures. For 
instance, the set of assertions and procedures in a PLANNER-like data base may be taken 
as the set of program beliefs. The TMS associates a TMS-node with each of these 
structures. These nodes are used for recording several types of information about belief In 
the corresponding program structure. The most important piece of information is the set of 
justifications for a node. These justifications describe the reasons for believing the 
knowledge represented by the program structure associated with the node. Each time the 
reasoning program determines a new belief or assertion, it informs the TMS of a 
justification for the node corresponding to the new belief. This justification is in terms of 
the nodes of the other program structures used in the derivation. The TMS then adds this 
new justification to the set of justifications attached to the TMS-node of the new belief. 

Each time a new justification is provided, the TMS checks to see if any changes 
in beliefs are indicated by the new justification. If so, the process of truth maintenance is 
invoked. This involves examining the recorded justifications to redetermine well-founded 
support for the nodes whose justifications depended on the changed beliefs. The program 
is then notified of the changes made by the TMS. To allow this, the program can associate 
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several functions with each of the TMS-nodes associated with its own structures. To signal 
the occurrence of changes in beliefs, the TMS simply invokes the function associated with 
the changed TMS-node and the nature of the change that has occurred. The program 
structure associated with the changed node is used as the argument passed to the function. 
In this way, the program can arrange that changes in its beliefs can initiate any desired 
changes to its structures. 

The program can also tell the TMS that a certain node represents a contradiction. 
The TMS remembers this, and attempts to ensure that the node is never believed. It does 
this by invoking the dependency-directed backtracking system whenever well-founded 
support is derived for the contradiction node. The backtracker will then try to invalidate 
the support of the contradiction by removing one of the assumptions underlying the 
contradiction. Contradictions which cannot be removed by this process are tolerated. 

The TMS provides many useful functions for interrogating the structure of the 
current set of program beliefs. Whenever well-founded support for a TMS-node is 
determined, the TMS also records a set of antecedent nodes and a set of consequent nodes. 
These sets are derived from the justifications used in determining the well-founded support. 
The set of antecedents is the set of nodes on which the belief depends. The set of 
consequences is the set of nodes whose justifications depend on the belief. The TMS may 
then be queried for the antecedents or consequences of a particular belief, or for other 
information derived from these relationships between beliefs. For instance, the set of 
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C. An Example 


On the ground. 

Sleep sound. 

I’ll apply 
To your eye, 

Gentle lover, remedy. 

When thou wakest, 

Thou takest 
True delight 
In the sight 

Of thy former lady’s eye. 

And the country proverb known. 

That every man should take his own, 

In your waking shall be shown. 

Jack shall have Jill, 

Nought shall go ill, 

The man shall have his mare again and alt shall be well. 

William Shakespeare, A Midsummer Night’s Dream 


This section presents a simple example involving the making of assumptions, 
truth maintenance, and dependency-directed backtracking. For this example we set modesty 
aside and attempt to imitate William Shakespeare in designing the plot of A Midsummer 
Night’s Dream. The play is to be a comedy. The major problem in this undertaking is to 
depict the foolishness of mortals while preventing the story from turning into a tragedy. 
This is done with a truth maintenance system. The structure of the plot, in terms of the 
player’s attitudes, is determined by truth maintenance. When events threaten tragedy, 
dependency-directed backtracking is invoked to change their attitudes. These steps 
eventually determine a consistent (happy) set of attitudes for the players. Disappointingly, 
this report can only describe the mechanisms behind truth maintenance and dependency- 
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directed backtracking. We must surrender the explanation of the magic of Puck to future 
research. 


The problem involves the four individuals Demitrius, Helena, Hermia, and 

Lysander. Initially, Hermia loves Lysander, Helena loves Demitrius, and to make the story 

interesting, both Demitrius and Lysander love Hermia. We first specify the loves of the 

women to our reasoning program. 

(Assert (loves Hermia Lysander) (Premise)) 

F-l (LOVES HERMIA LYSANDER) (PREMISE) 

(Assert (loves Helena Demitrius) (Premise)) 

F-2 (LOVES HELENA DEMITRIUS) (PREMISE) 

The information and rules of our example will be framed in the AMORD amoro problem 
solving system. Assertions, as above, are of the form (ASSERT <assertion pattern> 
< just i f i cat ion>) and should be read as "belief in <assertion pattern> is justified by 
cjusti f ication>." The justifications refer to functions which will accept the information 
transmitted in the justifications and implement the necessary TMS justifications between 
facts. Facts are referenced in justifications by means of a unique name of the form "F-nn" 
for each fact. 

The next specification is that of the amatory preferences of the men. In contrast 
to the solid beliefs of the women, the men are easily swayed by flowers and dependency- 
directed backtracking. 
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(Assume (loves Oemitrius Hermia) (Premise)) 

F-3 (ASSUMED (LOVES DEM1TR1US HERMIA)) (PREMISE) 

F-4 (NOT (LOVES OEMITRIUS HERMIA)) 0 ; No justification specified 

F-5 (LOVES DEMITRIUS HERMIA) (ASSUMPTION F-3 F-4) 

Assumptions are the fundamental use of non-monotonic justifications in the dependency 

system. The assumption of F-5 above is accomplished by asserting the reason (F-3) for the 

assumption and establishing belief in F-5 based on this reason and on the lack of belief in 

F-4. This mechanism will be explained in more detail in the next chapter. Its effect is to 

ensure that F-5 will be believed as long as there are no reasons for believing otherwise. At 

this point, F-4 is not believed, for no reasons exist supporting its belief. F-5 is believed, 

since F-3 is believed and F-4 is not. 

(Assume (loves Lysander Hermia) (Premise)) 

F-6 (ASSUMED (LOVES LYSANDER HERMIA)) (PREMISE) 

F-7 (NOT (LOVES LYSANDER HERMIA)) 0 

F-8 (LOVES LYSANDER HERMIA) (ASSUMPTION F-6 F-7) 

(Rule (:n (not (loves Oemitrius Hermia))) 

(Assert (loves Oemitrius Helena) (QuaIity-not-quantity sn))) 

This rule specifies Demitrius’ love if he falls from love with Hermia by providing the 

alternative of Helena. The first component of the rule is a pattern, which specifies both a 

variable (marked by the colon prefix) to be bound to the fact name of the matching 

assertion, and the pattern against which assertions are to be matched. The body of the rule 

follows the pattern. If a matching assertion is present, the rule will bind the variables of the 

pattern to the values derived from the match and evaluate each expression of the body. If 

it becomes known that Demitrius does not love Hermia, the above rule will justify the belief 

that Demitrius loves Helena. Lysander’s second choice is described similarly. 
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(Rule (:n (not (loves Lysander Hermia))) 

(Assert (loves Lysander Helena) (Love-in-idleness :n))) 

Next, we add some real-world knowledge about the troubles of men. 

(Assert (jealous Lysander) (Premise)) 

F-9 (JEALOUS LYSANDER) (PREMISE) 


(Rule (:j (jealous :x)) 

(Rule (:ll (loves :x : y)) 

(Rule (s12 (loves ;z : y)) 

(if (not (equal :x :z)) 

(Assert (kills :x :z) (Jealousy :j :I1 :12)))))) 


This rule embodies the knowledge that jealous people tend to react unpleasantly against 

others who also love the object of their jealousy. The conditional of the rule body ensures 

that jealousy is not self-applicable. 

(Rule (:ll (loves :x :y)) 

(Rule (s12 (loves :y : z)) 

(if (not (equal :x :z)) 

(Assert (kills ;x sx) (Unrequited-love :I1 :12))))) 

This rule expresses the depression and consequent action resulting from unrequited love. 


The final rule provides the means by which the happy nature of this comedy is 
ensured. This is done by declaring all murders to be tragedies. The occurrence of a 
tragedy is declared to be a contradiction. (Actually, tragedies can be interpreted as 
signalling the contradiction of a particular murder with the general principle (not (kills 
:x :y)) .) This contradiction will lead to changing the set of assumptions about the loves 
of the characters which lead to the tragedy. 

(RuIe (:k (kills :x :y)) 

(Assert (tragedy :k) (Contradiction :k))) 
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With these assertions and rules we begin the analysis of the conflicts between the 
desires of the four lovers. AMORD does not specify the order in which rules are to be 
applied to matching assertions. We will choose an order of application which provides for 
maximal entertainment. 

The first derived assertion notes the conflict caused by Lysander’s jealousy. 

F-10 (KILLS LYSANDER DEMITRIUS) (JEALOUSY F-9 F-8 F-S) 

This is noticed to be a tragedy, and so ruled out as a happy state of affairs. 

F-ll (TRAGEDY F-10) (CONTRADICTION F-10) 


The derivation of belief in a contradiction indicates the inconsistency of the set of 
beliefs used in deriving the contradiction. To restore the (apparent) consistency of the set of 
beliefs, the TMS notifies the dependency-directed backtracker of the contradiction. The 
backtracking process consists of tracing backwards through the antecedents of the 
contradiction to find the set of assumptions underlying the contradiction. One of these 
assumptions must be removed to remove the contradiction. The proper justification for the 
removal must be specified. The reason for retracting an assumption is that the assumption, 
when combined with the other assumptions, provides support for the contradiction. This 
reason is valid only under certain circumstances -- those in which the combination of the set 
of assumptions provides support for the contradiction. This is the statement of a 
conditional proof. That is, the justification for not believing a particular assumption is that 
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the other assumptions are believed, and that if all the assumptions are believed, the 
contradiction follows. Dependency-directed backtracking improves on traditional 
backtracking mechanisms in two ways; irrelevant assumptions are ignored, since the set of 
inconsistent beliefs is determined by tracing dependencies; and the cause of the 
contradiction is summarized in terms of this set of inconsistent assumptions as a conditional 
proof which remains valid after the contradiction itself has been removed. 

In the case at hand, this process begins by examining the reasons for the 
contradiction in order to locate the inconsistent set of assumptions underlying the 
contradiction. The contradiction F-ll depends upon F-10, which in turn depends upon F- 
9, F-8, and F-5. F-8 and F-5 are recognized as assumptions by the system, since the reasons 
for their beliefs include the lack of belief in F-7 and F-4 respectively. Beliefs supported by 
a lack of knowledge in other assertions are suspect. This is because an inconsistency based 
on the lack of a reason for believing some fact can be interpreted as providing a reason for 
believing that fact. For instance, a robot may decide that it is safe to cross the street 
because of its failure in attempting to prove that it is unsafe to cross the street. If the robot 
then gets run over, that contradicts its belief in the safety of its actions. The natural 
conclusion is that it was unsafe to cross the street. 

The backtracking system will try to reconcile the conflicting assumptions by 
making sure they are not ^11 believed at once. This is accomplished by choosing one of the 
suspect assumptions at random and disbelieving it. The disbelief is brought about by 
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justifying belief in one of the supporting facts whose former lack of valid justifications 
allowed belief in the selected assumption. This new justification is made on the basis of the 
beliefs in the other assumptions underlying the contradiction and that part of the support 
for the contradiction which does not depend on these assumptions. 

Note at this point one of the efficiencies of dependency-directed backtracking 
relative to the traditional chronological backtracking schemes. In the above, the set of 
inconsistent assumptions underlying the contradiction is a subset of all extant assumptions, 
for I neglected to mention my assumptions about the loves of Theseus, Hippolyta, Oberon, 
Titania, Bottom, Pyramus and Thisby. These other assumptions may have been 
determined after the current choices for Lysander and Demitrius. Chronological 
backtracking systems for choosing alternatives might search through sets of choices 
involving these independent assumptions. The dependency-directed system will only 
consider those assumption actually affecting the discovered contradiction. 

The next step in the backtracking procedure is the creation of a 
NOGOOD, N0C00P an assertion summarizing the support for the contradiction which is 
independent of the inconsistent set of assumptions. 

F-12 (NOGOOD F-ll) (CP F-ll (F-8 F-5)) 

This statement of independent support is made by means of a conditional proof 
justification, stating that F-12 should be believed if when F-8 and F-5 are believed, so is 
F-ll. In the present situation, this reduces to the question of belief in F-9. This is because 
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F-9 can be combined with the assumptions F-8 and F-5 to support belief in Demitrius’ 
murder. In effect, belief in F-12 is supported solely by belief in Lysander’s jealousy. 

We must not believe all the assumptions in the set of inconsistent assumptions at 
the same time. To ensure this, the NOGOOD is used to justify belief in some of the 
assertions underlying these assumptions. The assertions to justify are those whose lack of 
belief was used in the support of the assumptions. The minimum that is necessary to 
accomplish this is to provide a valid justification for belief in one of the unbelieved 
assertions supporting one of the assumptions. Logically, any one of the assumptions in the 
inconsistent set can be removed. However, unimpeachable reasons may later be found for 
believing some of the assumptions. It is necessary to make sure that each assumption will 
be retracted in turn if the remaining assumptions cannot be doubted. By describing each of 
the possible ruling-out of beliefs through these new justifications, knowledge of the 
inconsistency is preserved even if an assumption is retracted and later rejustified. 

F-7 (NOT (LOVES LYSANOER HERMIA)) (N0G000 F-12 F-5) 

TRUTH MAINTENANCE PROCESSING DUE TO F-7. 

F-4 (NOT (LOVES DEMITRIUS HERMIA)) (N0G00D F-12 F-8) 

Note that truth maintenance occurred after the new support for belief in F-7, since belief in 
F-8 depended on a lack of belief in F-7. The invocation of truth maintenance affected only 
those beliefs determined from the changed belief -- F-7, F-8, F-10, and F-ll. All other facts 
are known, by means of the recorded dependencies, to be independent of these changes. 
Following truth maintenance, F-7 is believed, and F-8, F-10, and F-ll are not. Since F-8 
is not believed, the following justification of F-4 via F-12 and F-8 fails to support belief in 



21 


F-4. 


With the backtracking concluded, we can continue the analysis of the 
consequences of the rules. The next focus for attention is Lysander’s change of lover. His 
love for Hermia was retracted by the backtracker, so he now turns to Helena. 
Unfortunately, this means that Hermia has now lost her love and kills herself in a fit of 
despondence. 

F-13 (LOVES LYSANDER HELENA) (LOVE-IN-IDLENESS F-7) 

F-14 (KILLS HERMIA HERMIA) (UNREQUITED-LOVE F-l F-13) 

F-15 (TRAGEDY F-14) (CONTRADICTION F-14) 


Another bout of backtracking is invoked. This time, tracing backwards through 

the antecedents of the contradiction leads to F-14, F-13, F-l, F-7, F-12, and F-5. Of these, 

only F-5 is an assumption. The NOGOOD mechanism then forces the retraction of the 

assumption that Demitrius loves Hermia. 

F-1G (NOGOOD F-15) (CP F-15 (F-5)) 

F-4 (NOT (LOVES DEMITRIUS HERMIA)) (NOGOOD F-1G) 

TRUTH MAINTENANCE PROCESSING INVOKED BY F-4. 

In this situation the support of the NOGOOD consists of the beliefs F-l and F-12. This 

invocation of truth maintenance involves checking the beliefs in F-4, F-5, F-7, F-8, F-13, 

F-14, and F-15. The supporting of belief in F-4 now removes support for F-5, which was 

the reason for the retraction of Lysander's love for Hermia. Truth maintenance determines 

that F-4 and F-8, are believed, and that F-5, F-7, F-13, F-14, and F-15 are not. This 

means that Lysander is now back with Hermia. 


The end of fht fiimotr cook* 11 DimiUiin niiw hi till ifiinr of his mis (with i 

• «v w IPW «Mr^Pv*SNpppr-qmPFr .^ppp|ppp,,^|pipnvr .W-F^lrF . -^Fw. “ 


F-17 (LOVES 0011 TfllUB HBL0*> (QUM.ITY-N0T-QWHT1TV F-4) 


This satisfies Helena's teee Since Henii and Lpaie am mM to the last invocation 
of truth maintenan ce, aB to t*o» well. 
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II* Truth Maintenance Systems Applied 


A. Introduction 


A truth maintenance system provides a representation for describing properties of 
beliefs and relationships between beliefs. These properties and relationships are interpreted 
by the TMS as constraints on the current set of beliefs. The duty of the TMS is to record 
these constraints and to maintain the current set of beliefs in accordance with these 
constraints. The following chapter describes mechanisms for efficiently achieving this 
concordance. This chapter describes the basic types of information accepted by the TMS, 
and their use in describing more complex relationships of importance in problem solving 
programs. 


The TMS accepts two forms of information; justifications for beliefs, and 
declarations of contradictions. Justifications specify conditions under which a belief is to be 
held. These conditions involve questions about whether certain other beliefs are held. 
Contradictions specify conditions under which a belief is not to be held. Beliefs which are 
declared to be contradictions indicate that an inconsistent set of hypotheses is in force. The 
inconsistency is resolved by invoking the process of dependency-directed backtracking. 

The second section of this chapter describes the representation of reasons for 
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holding beliefs. This representation can be used to describe non-monotonic deductions and 
conditional proofs. The third section uses this representation to model several important 
relationships between beliefs in problem solving systems. These include default 
assumptions, sets of alternatives, and equivalence class representatives. The final section 
describes how beliefs may be automatically organized into hierarchical levels of detail. 
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B. Representine Knowledee About Beliefs 

Everything’s got a moral, if you can only find it. 

Lewis Carroll, Alice in Wonderland 

A truth maintenance system has two basic components; beliefs, and justifications 

. » 

for beliefs. A node is used to represent a component of program knowledge which may be 
invested with belief. For instance, each assertion in a PLANNER-like data base might 
have an attached node to represent the assertion in the TMS. A justification is used to 
represent a reason for believing the knowledge represented by a node. Justifications for 
belief in a node are predicates of other nodes. These predicates have an internal structure 
which is accessible to the truth maintenance system. This allows the TMS to extract several 
types of dependency relationships between nodes by examining justifications. The two most 
important types of dependencies are those of the antecedence and consequence relationships 
between nodes. 

A node may have several justifications for belief. The node is believed if at least 
one of these justifications is valid. A justification is valid if it evaluates true. We say that a 
node which is believed is in, and that a node without a valid justification is out. The 
distinction between in and out is not that of true and false. The former denote conditions 
of knowledge about reasons for belief; the latter, belief in a piece of knowledge or its 
negation. Lo * ies of B * l,ef We say that a node which is in has a support-status of IN, and that a 
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node which is out has a support-status of OUT. IN and OUT will also be used as 
predicates of sets of nodes in justifications. 

The basic types of justifications for belief are premise justifications, deductive 
justifications, conditional proof justifications, and assumption justifications. Nodes believed 
due to premise, deductive, conditional proof, or assumption justifications are called, 
respectively, premises, deductions, implications, and assumptions. 

Premise justifications correspond to the constantly true predicate. Premises are 
therefore always in, independent of any other beliefs. Premises are useful in expressing the 
basic knowledge of a program, and in hypothetical reasoning. 

Deductive justifications express that one belief follows from belief in each node of 
a set of nodes. Deductive justifications are the most common form of justification in normal 
computations. 

Conditional Proofs are justifications for supporting belief in a node on the basis 
of the derivability of one node from other nodes. A conditional proof justification has two 
parts; a single node, called the consequent of the conditional proof, and a set of nodes, 
called the hypotheses of the conditional proof. The support implied by the conditional 
proof justification is the subset of the support of the consequent which does not derive from 
the hypotheses. Nodes justified by conditional proofs have the meaning of an implication. 
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The most important applications of conditional proof justifications are in summarizations. 
In dependency-directed backtracking, for example, conditional proofs are used to note the 
reasons for the inconsistency of a set of assumptions. Even after some of the assumptions 
are retracted, the conditional proof remains valid. This prevents the same mistake 
occurring in the future. 

Assumption justifications support beliefs on the basis of a lack of knowledge. 

They are justifications which are valid only if specified nodes are out. Assumptions 

represent non-monotonic knowledge. Unlike other types of justifications, assumption 

justifications can be invalidated by the addition of new justifications for beliefs. The 

typical use of an assumption justification is in deriving one belief through an inability to 

prove it false. For instance, one may assume a node F true unless proven otherwise by 

justifying F with the predicate (OUT ~F). If ~F is a node representing the negation of F, 

this justification will support belief in F as long as there are no valid reasons for believing 
~f.thnot 


These types of justification can be captured in two forms of predicates. The first 
of these, the support-list justification, is represented by a predicate of the form 

(AND (IN <inlist>) (OUT <outlist>)). 

A support-list justification is valid if each node in its inlist is in, and each node in its ouilist 
is out. Premise justifications are support-list justifications in which both the inlist and 
ouilist are empty. Deductive justifications are those in which the ouilist is empty. 


ft 
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Assumption justifications have a non-empty ouflist. 

Conditional proof justifications cannot be represented by a support-list 
justification. Conditional proof justifications will be represented by a predicate of the form 

(CP <consequent> <inhypotheses> <outhypotheses>). 

A justification of this form is valid if the consequent node is in whenever each node of the 
inhypotheses is in and each node of the ouihypotheses is out. Standard conditional proofs 
in natural deduction systems specify a single set of hypotheses. Our conditional proofs 
require that the set of hypotheses be divided into two disjoint subsets, since nodes may be 
derived both from some nodes being in and other nodes being out. Some natural deduction 
systems also allow a set of consequents in a conditional proof. We restrict our conditional 
proofs to a single consequent for the purpose of efficiency. Note that if multiple consequents 
were allowed, in the form of a set of in consequents and a set of out consequents, support-list 
justifications would be representable as conditional proofs with empty sets of hypotheses. 
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C. Problem Solving Structures 

Or, if there were a sympathy in choice, 

War, death, or sickness did lay siege to it, 

Making it momentany as a sound, 

Swift as a shadow, short as any dream, 

Brief as the lightning in the collied night, 

That, in a spleen, unfolds both heaven and earth, 

And, ere a man hath power to say, "Behold!" 

The jaws of darkness do devour it up: 

So quick bright things come to confusion. 

William Shakespeare, A Midsummer Night's Dream 


These basic types of justifications can be employed to represent more complex 
relationships between beliefs. This section is devoted to describing some of these. The 
relationships presented below describe choice structures. In these, the justifications are 
arranged to select one alternative from a set of alternatives. In most cases, this choice is 
backtrackable. That is, if a contradiction is derived which depends on the choice, the 
backtracking mechanism can cause a new alternative to be chosen from the set of 
alternatives. In the equivalence class representative selector, the choice is not backtrackable. 
In some of the backtrackable choice structures, new alternatives will be chosen in a specified 
order as previous alternatives are ruled out. In others, random choices are made from the 
set of yet acceptable alternatives. An additional complexity involves the extensibility of the 
structures. Some of the structures can be augmented at any time by new members of the set 
of alternatives. Other structures are fixed at creation, and cannot be augmented. 
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C.l Default Assumptions 

One very common technique used in problem solving systems is to specify a 
default choice for the value of some quantity. This choice is made with the intent of 
overriding it if either a good reason is found for using some other value, or if making the 
default choice leads to an inconsistency. In the case of a binary choice, such a default 
assumption can be represented by believing a node if the node representing its negation is 
out. The more general case can be represented by the following generalization of the binary 
case. Let {F j ,... , F n } be the set of the nodes which represent each of the possible values of 
the choice. Let G be the node which represents the reason for making the default 
assumption. NEEDCH0ICE Then F f may be made the default choice by providing it with the 
justification 

(AND (IN G) (OUT Fj ... F H F f+/ ... F n )). 

If no information about the choice exists, there will be no reasons for believing any of the 
alternatives except F^. Thus F, will be in and each of the other alternatives will be out. If 
some other alternative receives a valid justification from other sources, that alternative will 
become in. This will invalidate the support of F,. and F, will become out. If a 
contradiction is derived from F,, the dependency-directed backtracking mechanism will 
recognize that F^ is an assumption by means of its dependence on the other alternatives 
being out. The backtracker may then justify one of the other alternatives at random, as 
described in the following chapter, causing F i to go out. In effect, backtracking will cause 
the removal of the default choice from the set of alternatives, and wilt set up a new default 
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assumption structure from the remaining alternatives. 

The above structure is not extensible. No new alternatives can be added to the 
set once the default assumption justification has been made. Such extensibility is necessary 
when specifying a number as a default due to the large number of possible alternatives. 
For cases like this the following structure may be used instead. Retaining the above 
notation, let ~F f be a new node which will represent the negation of F^ We will arrange 
for Fi to be believed if cannot be proven, and will set up justifications so that if Fj is 
distinct from F^ Fj will imply ~ F This is done by giving F ^ the justification 

(AND (IN G) (OUT ~Ff )), 
and by giving ~ F^ a justification of the form 

(AND (IN Fj) (OUT)) 

for each alternative F . distinct from F As before, F f will be assumed if no reasons for 

J 1 1 

using any other alternative exist. Furthermore, new alternatives can be added to the set 
simply by giving ~ F^ a new justification corresponding to the new alternative. This 
structure for default assumptions will behave as did the fixed structure in the case of an 
unselected alternative receiving independent support. Backtracking, however, has a 
different effect. If a contradiction is derived from the default assumption supported by this 
structure, ~ F^ will be justified so as to make F^ become out . If this happens, no alternative 
will be selected to take the place of the default assumption. The extensible structure 
requires an external mechanism to construct a new default assumption whenever the default 


is ruled out. 
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C.2 Unordered Sets of Alternatives 


Another common problem solving structure is the unordered set of alternatives. 
Such unordered sets occur in Micro-PLANNER as the set of methods retrieved for solving 
a goal when no recommendation lists are specified. This structure can be represented as a 
number of overlayed default assumptions as described in the previous section. By setting 
up justifications as follows, one of the assumptions will be chosen at random. As before, let 

{F 1 .F n } be the set of nodes representing the alternative choices, and let C be the node 

representing the reason for making the choice. One node of the set of alternatives will be 
randomly chosen to be in if each F, is provided with the antecedent 

(AND (IN G) (OUT Fj ... F imJ F M ... F n )) t 

that is, 

(AND (IN <reason for alternative set>) (OUT cother alternatives>)) 

With this structure, the alternative which is selected will be believed unless either a 
contradiction causes another alternative to be believed, or if one of the other alternatives 
receives an independent justification for belief. The derivation of a contradiction from the 
selected alternative will cause another alternative to be selected at random. This in turn 
will cause the retraction of the previous choice. 

This structure does not prevent more than one of the F, from being in via an 
independent means of support. To impose this exclusiveness, it is necessary to state that 
each pair of alternatives is inconsistent. This can be done by supporting a contradiction 
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with a justification (IN F^ Fj) whenever each of the pair of alternatives F i and Fj 
becomes in. 

This structure does not allow the addition of new alternatives to the set of 
alternatives. To effect such extensibility, the following structure is necessary. For each 
possible alternative F^ two new nodes, PA^ (meaning "F^ is a possible alternative") and 
NSA i (meaning "F f is not the selected alternative") should be created. Each PA i should be 
justified with the reason for having F i in the set of alternatives. Each F f and NS A^ should 
be justified as follows:, 

F,: (AND (IN PA,) (OUT NSA,)) 

{or: (AND <is alternative> <is selected alternative^} 

NSAf (IN F •) {for each j distinct from i} 

{or: <no other alternative selected>} 

New alternatives can be added to the set by collecting all existing alternatives and creating 
the above justifications for the the new alternative node and for all of the not-selected- 


alternative nodes. 
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C.3 Linearly Ordered Sets of Alternatives 

Linearly ordered sets of alternatives are useful whenever heuristic information is 
available for making a choice. One way such situations arise is by using recommendation 
lists in Micro-PLANNER. Another use is in heuristically choosing the value of some 
quantity, such as the state of a transistor or the day of the week for a meeting. These types 
of sets of alternatives can be described by the following justifications. The justifications are 
arranged so that backtracking will cause sequencing through the set of alternatives in the 
specified order. For each alternative A^ three new nodes should be created. These new 
nodes are PA i (meaning m A i is a possible alternative"), NS A ^ (meaning " A i is not the 
selected alternative"), and ROA i (meaning "A^ is a ruled-out alternative"). Each PAj should 
be justified with the reason for including A i in the set of alternatives. Each ROA t is left 
unjustified. Each A^ and NSA^ should be given justifications as follows: 

A t : (AND (IN PA i NSA J ... NSA H ) (OUT ROA t )) 

{or: (AND <is alternative> <no better is selected> <is not ruled out>)} 

NSA t : (OUT PA t ) , (IN ROA t ) 

{or: (OR <is not a valid alternative:* <is ruled out>)} 

With this structure, processes can independently rule in or rule out an alternative by 
justifying the appropriate alternative node or ruled-out-alternative node. 
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C.4 Equivalence Class Representatives 

In many cases, a value may be computed independently by several different 
methods. Sometimes different values will be computed for the same quantity. It is desirable 
to check the consistency of each of these values with all other values for the same quantity. 
This is a way in which different parts of program knowledge can constrain each other, 
either by combining two representations of the same value to compute a new quantity, or by 
declaring the two representations to be contradictory.* >r0pa * a * i<m Each new representation of 
the value in question should be compared with the previously discovered representations to 
check for coincidences and contradictions. The new representation should then be added to 
the list of alternate representations for checking further representations. Since any value in 
the set of consistent representations is equivalent to all the others, queries made for the 
value of the quantity should be answered with a single representative. Successive queries 
should be answered with the same representative. In addition, since all the possible values 
are equivalent and consistent, backtracking should not attempt to choose a new representive 
if the selected representative is used in deriving a contradiction. 

The following structure describes a mechanism whereby a single representative 
can be chosen from a set of equivalent objects. The justifications are arranged so that one 
member of the set will be distinguished as the representative member. This representative 
will not depend upon the choice from the set. This is done as follows. For each member, 
Af t ., create two new nodes PR^ (meaning "Af^ is a possible representative") and SR^ 
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(meaning "M t is the selected representative”). Each PR i should be justified with the reason 
for believing to be a consistent member of the equivalence class. Each M^ and SR^ 
should be justified as follows: 

SR t : (AND (IN PR.) (OUT SRj ... SR H )) 

{or: (AND <is a member> <no previous is selected>)} 

M.: (CP of SR t relative to (OUT SRj ... SR H )) 

{or: (CP of <selected alternative> relative to cthose not selected>)} 

The alternative mechanism selects one of the members PR^ as the representative SR.. The 
choice is hidden from the backtracking system by the conditional proof justifications for the 
representatives. These conditional proofs remove all dependence of the representative on 
the choice mechanism, so that M^ depends only on PR Because of this, the backtracking 
system will not attempt to select another member of the set if the selected representative is 
involved in an inconsistency. The representative will be changed only if an assumption is 
retracted which supports the membership of the representative in the set. This structure is 
extensible. New members of the equivalence class can be added to the end of the list of 


members. 
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E. Generalization and Levels of Detail 

The lunatic, the lover, and the poet, 

Are of imagination all compact. 

William Shakespeare, A Midsummer Night’s Dream 

Hypothetical reasoning is useful in modifying arguments for beliefs. Conditional 
proofs allow the relativization of beliefs with respect to a set of beliefs. If the original belief 
is justified by the support of this conditional proof, the argument for the belief has been 
generalized. Alternatively, the belief may be justified by the conjunction of the support for 
the conditional proof and a set of beliefs which is semantically equivalent to the set of 
hypotheses of the conditional proof. If the new set of beliefs is smaller than the set of 
replaced hypotheses, the argument has been summarized. 

One technique for solving a problem is to generalize from the solution of a 
particular instance of a problem to a solution of the problem itself. This technique is useful 
when a result valid for each member of a set is desired, but computations can be performed 
only on specific members of the set. Conditional proofs may be used in such cases to 
generalize the justification of the specific result by removing its dependence on the specific 
member used. For example, an electronic circuit analysis program might require a specific 
(numerical) input voltage to calculate the gain of a circuit. This would produce a specific 
gain which depends on the particular input voltage used. Actually, the computed gain is 
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valid over the entire linear region of the device. The gain for all input voltages can be 
computed by using a typical numeric val* * of the input voltage to compute an instance of 
the gain, and then generalizing the argument for this instance. This is done by justifying 
the general gain value as the conditional proof of the specific gain value relative to the 
particular value of the input voltage used. (This neglects the problems introduced by the 
dependence of the computation on inequalities.) 

This technique of generalization is a special caseof a powerful method for 
separating levels of detail. This method uses conditional proofs, to support results in terms 
of the names of the methods used to compute them. In this way, the lower level of detail is 
summarized and replace by the name of the method which produced it. This technique is 
critically important in hierarchical systems employing truth maintenance. Without such 
summarizations, explanations of results involve huge numbers of intermediate results from 
the lower levels of detail used in computing the final result. This not only produces 
incredibly long and incomprehensible arguments, but also degrades the effectiveness of 
backtracking and other processes which must trace through arguments for beliefs. 

One way to introduce hierarchical structure into computations is to separate 
knowledge into levels of detail. These levels can be reflected in the dependency structure by 
a mechanisms analogous to function calling in programming languages. When one level of 
knowledge needs to use a lower level to compute something, the higher level "calls" a lower 
level routine. The components of higher level knowledge to be used in the computation are 
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the arguments" of the function call. These are mapped into corresponding components of 
lower level knowledge. These corresponding components represent the "parameters" of the 
lower level routine. The low level routine, the "function", then performs the desired 

computation using the parameters, and passes the resulting values back up to the higher 
level of knowledge. 

This analogy is implemented as follows. Routines are attached to named 
boundaries of knowledge. A boundary consists of two sides and a set of paired terminals. 
Each terminal on one side of the boundary has a corresponding terminal on the other side. 
One side of a boundary represents the external view of the routine, that is, the "call" on the 
routine. The other side of the boundary represents the internal view of the routine, that is, 
the parameter declarations" of the routine. When knowledge appears at one side of a 
terminal of a boundary, it is transmitted to the corresponding terminal on the other side of 
the boundary. A value is transmitted from an outside terminal by justifying the same value 
for the corresponding inside terminal. The justification used is in terms of the value’s 
appearance on the outside terminal in conjunction with a node representing the name of the 
boundary. A value is transmitted from an inside terminal to the corresponding outside 
terminal by justifying the outside value as the conjunction of the node representing the 
boundary name and the conditional proof of the inside value with respect to the boundary 
name. By using the conditional proof, all dependence of the value on knowledge inside the 
boundary is removed. This knowledge is replaced bv adding the boundary name back into 
the justification after the conditional proof has been performed. ,nttffac * 8 
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The following example demonstrates the use of this technique in a hypothetical 
hierarchical electronic circuit analysis program. This example is loosely based on an actual 
program (that ran at least once) written by G. J. Sussman, M. Matz, and myself. 


The basis of the example will be the conservation of current by a resistor. 

Resistors are modelled by overlaying two constraints on the basic resistor device.* 9 These 

are the constraints of 2-terminalness (conservation of current) and ohms-lawness. 

(Rule (:t (type :r resistor)) 

(Assert (type sr 2-terminal) (Overlay s t)) 

(Assert (type :r ohms-1 aw) (Overlay s t))) 

In this example we will ignore the ohms-law aspect of the resistor. The implementation of 

the 2-terminal constraint is in terms of a lower level of detail. This lower level implements 

equations as adders and multipliers connected together. The arithmetic level of devices is 

used to compute and propagate numerical constraints. This computation is uninteresting to 

the higher levels dealing with electrical laws and devices. The mechanism of conditional 

proof will be used to isolate the higher level of detail from the lower. 

(Rule (:t (type ;d 2-terminaU) 

(Assert (implementation sd (arithmetic-boxes 2-terminalness)) 

(Method :t)) 

(Rule (: impl (implementation :d (arithmetic-boxes 2-terminalness))) 
(Assert (type (kcl :d) adder) (part :t :impI)) 

(Assert (map (current (#1 :d)) (al (kcl :d)) simpl) 

(Make-map :t :impI)) 

(Assert (map (current (#2 sd)) (a2 (kcl sd)) simpl) 

(Make-map st simpl)) 

(Assert (value (sum (kcl sd)) 0) 

(Implementation st simpl)))) 

Here the 2-terminal constraint is implemented as an adder. This adder constrains the 
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currents of the terminals of the resistor to sum to zero by first mapping each of the currents 
to an addend of the adder, and then declaring the sum of the adder to be zero. These 
mappings will serve as the boundary separating the electrical level of detail (the currents on 
resistor terminals) from the arithmetical level of detail (the connections of adders). 


The following rule defines the behavior of the boundary mappings. 

(Rule (:m (map :varl :var2 :impl)) 

(Rule (s f (value :varl :val)) 

(Assert (value :var2 :val) (INMAP :f :m))) 

(Rule (:f (value :var2 :val)) 

(Assert (value :varl :val) (OUTMAP :f :impl)))) 

This rule sets up the channels by which pieces of information, in this case value assertions, 


are transmitted across the boundary. The INMAP justification does nothing special; it 
merely transmits the value across, adding the map assertion to the justification in passage. 
The OUTMAP justification is the means by which the higher level is separated from the lower 
level. The OUTMAP justification operates by asserting the value being transmitted at the 
higher level. The justification removes the dependence on the lower level of detail by using 

the conditional proof of the lower level value node relative to the Implementat ion node. 
That is 


(OUTMAP :f :impI) 

translates into 

(CP sf (: imp!) ()). 

Since both the mapping structure and the lower level internal structure depend upon this 
implementation node, they are absent from the resulting explanations. 
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As a particular example, we demonstrate the passage of current through a resistor. 

(Assert (type rl resistor) (Premise)) 

F-l (TYPE Rl RESISTOR) (PREMISE) 

F-2 (TYPE Rl 2-TERMINAL) (OVERLAY F-l) 

F-3 (TYPE Rl OHMS-LAU) (OVERLAY F-l) 

This defines a particular resistor, Rl. The next level of detail is then implemented. 

F-4 (IMPLEMENTATION Rl (ARITHMETIC-BOXES 2-TERMINALNESS)) (METHOD F-2) 

F-5 (TYPE (KCL Rl) ADDER) (PART F-2 F-4) 

F-6 (MAP (CURRENT (#1 Rl)) (A1 (KCL Rl)) F-4) (MAKE-MAP F-2 F-4) 

F-7 (MAP (CURRENT (#2 Rl)) (A2 (KCL Rl)) F-4) (MAKE-MAP F-2 F-4) 

F-8 (VALUE (SUM (KCL Rl)) 0) (IMPLEMENTATION F-2 F-4) 


With the wiring of the resistor completed (the wiring of the ohms-law constraint 

has been omitted for brevity), we can specify the current on one side of the resistor and 

examine the resulting explanations. 

(Assert (value (current (#1 rl)) 7) (Premise)) 

F-9 (VALUE (CURRENT (#1 Rl)) 7) (PREMISE) 

F-10 (VALUE (A1 (KCL Rl)) 7) (INMAP F-9 F-B) 

F-ll (VALUE (A2 (KCL Rl)) -7) (SUBTRACTION F-5 F-10 F-8) 

F-12 (VALUE (CURRENT (#2 Rl)) -7) (OUTMAP F-ll F-4) 

The lower level rules implementing the arithmetic constraints of addition and multiplication 
have also been omitted for brevity. 


A query for the explanation of the last node, F-12, produces the following result, 
in which the level of arithmetic detail is absent by means of the OUTMAP conditional proof of 
the computed value, as given in F-ll, relative to the implementation node F-4. The 
conditional proof is used to derive the set of higher level beliefs supporting the computed 
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value. These are the nodes used in the explanation. (The mechanism for deriving sets of 
supporting beliefs from conditional proofs is described in Chapter III.) Since there is only 
one possible implementation of a resistor, the IMPLEMENTATION node does not appear in the 
explanation. In other devices, such as transistors, there may be several possible 
implementations depending on the state of the device. In such cases, the implementation 
choice should be included in the justification for the higher-level result. 

(Explain ’F—12) 

PROOF OF F-12 * (VALUE (CURRENT Ktt2 Rl)) -7) (OUTMAP F-ll F-4) 

;;; THE INDEPENDENT SUPPORT OF (OUTMAP F-ll F-4) IS (IN F-9 F-2 F-l). 

F-9 (VALUE (CURRENT (#1 Rl)) 7) (PREMISE) 

F-2 (TYPE Rl 2-TERMINAL) (OVERLAY F-l) 

F-l (TYPE Rl RESISTOR) (PREMISE) 


This example has indicated the usefulness of conditional proofs in clarifying 
explanations by separating levels of detail. More important benefits are possible in 
improving the information examined by backtracking systems. Just as concise explanations 
are more useful to humans, improved explanation structures relating beliefs can ease the 
task of dependency-directed backtracking. Concise explanations reduce the number of 
nodes involved in the support of a contradiction. This allows the backtracking system to 

operate more efficiently. This also means that better reasons are developed in summarizing 
the reasons for inconsistencies. 
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Truth Maintenance Mechanisms 


A. Introduction 


The previous chapter presented the descriptive language for imparting 
information about beliefs to a truth maintenance system. Descriptions in this language 
concern logical, time-independent relationships between beliefs. Particular descriptions can 
be given to the TMS in any order. The purpose of this chapter is to describe mechanisms 
by which the TMS can maintain the consistency of the set of beliefs with the constraints 
imposed by new justifications and declared con trad ictions. Comp k x, * y 

This section of this chapter describes the basic components of the world of the 
TMS; nodes and justifications for belief. The second section presents the problems caused 
by circularities in dependency relationships. Circularities arise through circular proofs, and 
require careful handling in the process of determining the support of a belief. The third 
section discusses the process of truth maintenance. This process is invoked whenever new 
justifications or the retraction of premises cause beliefs to change. These changes mean that 
the support of any beliefs affected by the changes must be rederived. The fourth section 
discusses the handling of conditional proofs. The fifth section combines all these 
mechanisms to describe dependency-directed backtracking. 
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Little elaboration is needed on the concepts of nodes and justifications introduced 
in Section II.B. The internal structure of justifications is accessible by the TMS to allow 
efficient processing. To the TMS, a support-list justification (hereafter referred to as a SL- 
justification) is simply a pair of lists of nodes, the inlist and the oullist. A conditional proof 
justification (a CP-justification) has a single consequent node, and two lists of nodes, the 
inhypotheses and the ourhypotheses. The set of justifications of a node is called its 
justific ation-set. From these justifications we derive a dependency relationship between 
nodes. Each node has a list of consequences. These consequences are other nodes which 
have justifications mentioning the antecedent node. Each consequent node has either a SL- 
justification containing the node in question in the inlist or the ourlist, or has a CP- 

justification containing the node as either the consequent of the conditional proof, or as one 
of the hypotheses. 
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B. Well-Founded Support Relations 

Clear your mind of cant. 

Samuel Johnson 


Consider the situation in which the node F represents the assertion 

"(« (+ X Y) 4)", 


G represents 


and H represents 


"(« X D", 


"(- Y 3)". 

If both F and G are in, then belief in H can be justified by (AND (IN F G) (OUT)). This 
justification will cause H to become in. If G subsequently becomes out due to changing 
hypotheses, and if H becomes in by some other justification, then G can be justified by (AND 
(IN F H) (OUT)). Suppose the justification supporting belief in // then becomes invalid. 
If the decision to believe a node is based on a simple evaluation of each of the justifications 
of the node, then both G and H will be left in. This happens because the two justifications 

form circular proofs for G and H in terms of each other. These justifications are mutually 
satisfactory if F, G and H are in. 


n 



48 


Belief in nodes on the basis of circular proofs can be avoided by only believing 
nodes for which there exists a non-circular argument from premises and assumptions. This 
is accomplished by distinguishing a supporting-justification in the justification-set of each 
in node. The supporting-justification is a valid justification whose validity was determined 
by examining only nodes with well-founded support. Once a node is believed on the basis 
of a supporting-justification, it continues to be believed until its supporting-justification 
becomes invalid. If the node’s supporting-justification becomes invalid, the node and any 
nodes using the node in their well-founded support are examined to see if other 
justifications can provide new means of support. 

It is possible to generalize the supporting-justification of a node to a set of 
justifications, each of which provides well-founded support for belief in the node. This 
scheme is attractive because it allows one form of work to be avoided. A node will be 
believed as long as there is at least one supporting-justification. This makes it unnecessary 
to reconsider the support of the consequences of a node if the invalidation of one of the 
node’s supporting-justifications leaves the set of supporting-justifications nonempty. There 
are several problems with this approach. One problem is that the support of node must be 
checked with each change in its set of supporting-justifications, even if there is one 
supporting-justification which is always valid. If only one supporting-justification was 
maintained, this invariant justification could allow the checking process to completely ignore 
the node. Another problem is that a major use of the recorded justifications is in tracing 
backwards through the arguments for belief in a node. If multiple supporting-justifications 
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are used, then processes like dependency-directed backtracking and explanation generation 
can become very complex and costly. To handle the multiple justifications for beliefs, these 
processes would have to trace many branching arguments in parallel. Because of these 

problems, the approach used here is that of maintaining a single supporting-justification for 
each believed node. 

If any of several justifications can provide well-founded support, the best choice 
for the supporting-justification is the justification which will remain valid the longest. The 
problem of determining which justification is the most stable is intractable in general, like 
the problem of selecting pages to swap out of memory. Rather than select a supporting- 
justification completely at random, some (rather dubious) heuristics can be used. One 
simple heuristic, the one used in the programs of Appendix 3, is to choose the 
chronologically oldest of the possible justifications. This heuristic is based on the theory 
that chronologically older justifications are likely to be more "fundamental" in some sense, 
and thus less susceptible to change. Alternatively, a "self-organizing" heuristic such as 
bubbling the more stable justifications to the front of the order may be used to modify the 
order of the justification-set of the node. The current research has not included any 
experimentation to see if benefits accrue from the use of these heuristics, or to see which 
provides the better performance. One might also imagine schemes in which a "certainty 
factor is associated with each node. In such a scheme, the "certainty" of a justification 
might be computed from the certainty factors of the nodes mentioned by the justification. 
The heuristic then chooses the justification with the largest certainty factor as the 
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supporting-justification. Most such measures of certainty require the use of domain-specific 
knowledge about the meaning of the nodes and justifications involved. In addition, the 
semantics of a measure which is not a formal probability measure is very unclear. The use 
of certainty factors has not been persued here for these reasons. 

For the purpose of tracing through justifications, it is convenient to extract 
another dependency relationship from the supporting-justifications of nodes. The 
antecedents of a node are those nodes which currently support belief in the node. Thus an 
out node has no antecedents, and the antecedents of an in node are just those in the 
(necessarily disjoint) union of the inlist and ouitist of the node’s supporting-justification. (As 
will be explained in more detail later, CP-justifications never are the supporting- 
justification of nodes. Instead, a CP-justification is used to generate a new SL-justification 
summarizing the independent support of the conditional proof. This SL-justification is 
then used as the supporting-justification.) 

The antecedence dependency is not the only useful dependency relationship of this 
nature. When beliefs change, it is necessary to check not only the believed nodes which 
depended on the changed beliefs, but also any nodes which might now be believed by 
virtue of the changes. To make this efficient, the set of nodes affecting the current support- 
status of each node is collected into the node’s set of supporting-nodes. The supporting- 
nodes are the same as the antecedents for in nodes, since any change in one of the 
antecedents of a node may cause the node to become out. The supporting-nodes of an out 
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node are found by selecting one node from each justification of the node. Each of these 
nodes is selected because its support-status led to the invalidity of the corresponding 
justification. This means that each of the out supporting-nodes of an out node is in the 
inlist of one of the node’s justifications, and each in supporting-node is in the out\i$t of some 
justification. This definition does not specify a unique set of nodes as the supporting-nodes 
of an out node, but any such set suffices. The intent is for the supporting-nodes of a node 
to be a small set of nodes which, if unperturbed, indicates that belief in the supported node 
cannot change. In odd cases this definition allows inclusion into the supporting-nodes of a 
node some nodes that do not influence the support-status of the node. For example, the silly 
justification (AND (IN /) (OUT f )) might cause /to be included in the supporting-nodes, 
even though the justification is constantly false independent of the support-status of/. Note 
also that circularities can occur in the relationship of one node being a supporting-node of 
another. The algebra example above demonstrates such a case, for if the two nodes 
involved in the circularity are both out , they will have each other as supporting-nodes. 

From the supporting-nodes of a node, we define additional concepts as follows. 
The affected-consequences of a node are those nodes whose current support-status rests on 
the node; precisely, the affected-consequences of a node are those consequences of the node 
such that the node is a supporting-node of each of these consequences. The foundations of 
a node are those nodes involved in the well-founded support for belief in the node; 
precisely, the foundations of a node are the transitive closure of the antecedents of the node 
under the operation of taking antecedents. The ancestors of a node are those nodes 
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involved at some level in determining the current support-status of the node; precisely, the 
ancestors of a node are the transitive closure of the set of supporting-nodes of the node 
under the operation of taking supporting-nodes. The repercussions of a node are those 
other nodes whose support-statuses are affected at some level by the support-status of the 
node; precisely, the repercussions of a node are the transitive closure of the affected- 
consequences of the node under the operation of taking affected-consequences. 


II 
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C. Truth Maintenance 


And we’ll talk of them too. 

Who loses, who wins, who’s in, who’s out. 

And take upon’s the mystery of things. 

William Shakespeare, King Lear 

Truth maintenance is a process invoked whenever the support-status of a node 
changes. This process consists of redetermining the support-statuses of the node and its 
repercussions. This involves examining the affected nodes to find well-founded support. 
The presence of several types of circularities in the dependency structure complicates 
matters. These circularities call for a more elaborate mechanism than a simple bottom-up 
support analysis. 

Nodes can change their support-status in two ways. The normal reason for 
change is the addition of a new valid justification to an out node. This causes a change of 
support-status from out to in. The other way that a change can occur is if the justification 
of a premise is retracted. 

Different actions are required depending upon the validity of the new justification 
and the support-status of the justified node. A justification added to an in node requires 
only adding the new justification to the justification-set of the node. In this case, the new 
justification cannot cause a change of support or support-status. A new justification added 
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to the justification-set of an out node requires truth maintenance processing if the new 
justification is valid. A non-valid justification can be added to the justification-set of an out 
node without causing truth maintenance, but this requires that the set supporting-nodes of 
the node be updated to include a node responsible for the invalidity of the new justification. 

Truth maintenance processing is not required if a node has no affected- 
consequences. The support-status of the node can be changed without affecting any other 
beliefs. This special case routinely occurs after newly created nodes are given their first 
justification. Truth maintenance is also not required when retracting a node which does not 
have a premise justification for its supporting-justification. In this case, the retraction can 
remove any premise justifications from the justification-set without affecting the node’s well- 
founded support. 

Truth maintenance processing starts by producing a list containing the invoking 
nodes and their repercussions. Each node on this list is marked with a support-status of 
NIL to indicate that it lacks well-founded support. (A NIL support-status exists only during 
the process of truth maintenance. Outside of truth maintenance, all nodes have a support- 
status of either IN or OUT.) This marking is used to determine if a justification supplies 
well-founded support for a node. Next, each of the nodes on this list must be examined. 
This is a recursive procedure taking action only if the node being examined has a support- 
status of NIL. If so, the justification-set of the node is evaluated with respect to well- 
foundedness. This is a careful evaluation procedure described below. Examination of this 
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node terminates if well-founded support cannot be found. If well-founded support is found, 
the support-status of the node is set appropriately, the supporting-nodes are installed, and if 
the node is now in, the supporting-justification is installed. Since the newly determined 
support of this node might now allow determination of support for its consequences, each of 
the consequences of the node is examined in turn. Ef,ie * ney 

Justifications can be evaluated in a way which indicates whether they provide 
well-founded support. This is done by evaluating the justifications with respect to the three 
values T, F and NIL. SL-justifications evaluate to T if each node of the inlist is in and 
each node of the ouilist is out; to F if some node of the inlist is out or some node of the 
ouilist is in; and to NIL otherwise. CP-justifications evaluate to T if all inhypotheses are 
in, all ouihypotheses are out, and the consequent is in; to F if the first two conditions hold 
and the consequent is out; and to NIL otherwise. A node is considered in if any of its 
justifications evaluates to T, out if all its justifications evaluate to F, and otherwise lacks 
well-founded support. 

The above process of examination will determine well-founded support for the 
majority of nodes, but can leave some nodes without well-founded support. These are nodes 
which are involved in circularities in the dependency relation, or whose possible support 
depends on nodes involved in circularities. There are essentially three different kinds of 
circularities which can arise. The first and most common is a circularity in which all nodes 
involved can be considered out consistently with their justifications. Such circularities arise 


11 



56 


routinely through equivalences and simultaneous constraints. One of these circularities is 
present in the algebra example of the previous section. In that example, an equation 
produces a circularity between the nodes G and H. If neither of G or H is supported by 
justifications not involved in the circularity, both G and H should be considered out. 

The second type of circularity is one in which at least one of the nodes involved 
must be in. An example is that of two nodes F and G, such that F has an justification of 
the form (OUT G), and G has an justification of the form (OUT F). Here either F must be 
in and G out, or G must be in and F out. This type of circularity arises in defining 
unordered sets of alternatives. The other types of ordered alternative structures avoid such 
circularities. 

The third form of circularity which can arise is the unsatisfiable circularity. In 
this type of circularity, no assignment of support-statuses to nodes is consistent with their 
justifications. An example of such a circularity is a node F with the justification (OUT F). 
This justification implies that F is in if and only if F is out. Unsatisfiable circularities are 
bugs, indicating a misorganization of the knowledge of the program using the truth 
maintenance system. Unsatisfiable circularities are violations of the semantics of in and out, 
which can be interpreted as meaning that the lack of reasons for belief in a node is 
equivalent to the existence of reasons for belief in the node. (It has been my experience that 
such circularities are most commonly caused by confusing the concepts of in and out with 
those of true and false. For instance, the above example could be produced by this 
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misinterpretation as an attempt to assume belief in the node F by giving it the justification 
(OUT F).) 

The second step of truth maintenance handles these circularities. This step 
consists of a relaxation process in which the nodes not supported during the search for well- 
founded support are specially examined. Like the regular examination procedure, this 
special examination procedure also ignores nodes possessing a non-NIL support-status. It 
first checks for well-founded support, as in the previous examination process, and if it finds 
such support installs it and then processes the node’s consequences as described below. If 
well-founded support is still lacking, the SL-justification set is specially evaluated. This is 
done by considering a support-status of NIL in a referenced node to be equivalent to OUT. 
That is, the SL-justification set is evaluated under the assumption that all unsupported 
nodes are OUT. (The CP-justification set is ignored during this evaluation. This will be 
discussed later.) This evaluation determines the node to be either in or out. 

Once the examination finds the support-status for the node, it must check the 
consequences of the node. If the node was determined to be out, then a simple recursive 
examination of the consequences is sufficient. More care is required if the node was 
brought in. Any affected-consequences of the newly supported node had had their support 
determined on the assumption that the newly supported node was out. The inning of this 
node means that this assumption was mistaken. This requires that the affected- 
consequences of the node must be remarked and reexamined. If the node had no affected- 
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consequences, the examination can continue by recursively examining the consequences of 
the node. 


This relaxation procedure will devolve into an infinite loop if unsatisfiable 
circularities are present. Such circularities, as previously mentioned, are really erroneous 
uses of the truth maintenance system. This possibility of an infinite loop can be avoided at 
some expense by making a well-foundedness check before a node is brought in. This check 
operates by checking the ancestors of the tnned node to see if they include the node itself. If 
this condition holds, an unsatisfiable dependency structure has been detected.*"*^ 8 * 

The above process is incomplete in its treatment of nodes justified via conditional 
proofs. CP-justifications are never used as supporting-justifications. They are instead used 
to generate new SL-justifications. This is done whenever a node is brought in on the basis 
of a CP-justification. The FINDINDEP procedure described in the next section is used to 
trace backwards from the consequent of the CP-justification to collect the sets of nodes 
which support the consequent but are not themselves supported by the hypotheses of the 
CP-justification. These sets (one of in nodes, the other of out nodes) are then made into a 
new SL-justification. This new justification is made the supporting-antecedent of the node 
and added to the justification-set of the node. 

CP-justifications are not evaluated if they are out of context, that is, if an 
inhypothesis is out, or if an outhypothesis is in. Rather than perform the hypothesizing of 
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beliefs necessary to evaluate the conditional proof justification, the justification is ignored. 

This is an incompleteness in the current system, and a problem for exploration and solution 
by future research. 

The current partial solution to this problem is to pass over the examined nodes 
after truth maintenance has decided their support-statuses. Each node can have a CP- 
cpnsequent-list associated with it. This list is used to record the set of other nodes which 
use the node as a consequent of a CP-justification. If a node has some nodes on its CP- 
consequent-list and is in, then new SL-justiflcations are derived (if possible) for the nodes 
possessing the CP-justifications. Those nodes are then justified with any new justifications 

that result. If this step causes truth maintenance, the scan must be restarted to check for 
further changed nodes. 

A related check performed during this scan is that of looking for in nodes marked 

as contradictions. If such nodes are found, the backtracking mechanisms is invoked and the 
scan restarted. 

Once well-founded support has been derived for all the nodes affected by truth 
maintenance, the external system can be notified of any changes in beliefs that have 
occurred. This is easily done by allowing the external system to associate two functions with 
each node. One of these, the signal-recalling function, is called with the external 
representation of the node as its argument if the node’s support-status has changed from out 







61 


D. Conditional Proofs 


Some mistakes we must carry with us. 

Larry Niven, Ringworld 

The Deduction Theorem of mathematical logic states that if C is derivable from A 
and B, then (IMPLIES B C) is derivable from A alone. This theorem forms the basis for 
the conditional proof mechanism used in a truth maintenance system. This mechanism, 
called FINDINDEP, findindep is a procedure which uses a proof of the belief C to find a 
justification for (IMPLIES B C) in terms of A. Conditional proof justifications have a set of 
tnhypotheses and a set of oufhypotheses. If each node in the tnhypotheses is in, and each 
node in the oufhypotheses is out, then FINDINDEP can be applied to compute the set of 
support of the implication of any in node C by these hypotheses. That is, it computes the 
support of the implication 

(IMPLIES (AND (IN <inhypotheses>) (OUT <outhypotheses>)) C). 

This is done by finding the set of nodes in the foundations of C. This set is pruned by 
removing all of the inhypotheses and outhypotheses, as well any nodes that are 
repercussions of tnhypotheses or out hypotheses. The remaining set of nodes is the set of 
support for the above implication. This set can be pruned further. Each of the nodes in 
this set has affected-consequences. Some of the affected-consequences are among the 
foundations of C. If all such affected-consequences of a node are in the derived set of 
support, the node can be removed from the set of support. This is admissible because the 
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node supports C only through other nodes in the set of support. This pruning leaves a 
reduced set of support which can be combined with the hypotheses to support C. 

FINDINDEP consists of two basic steps, each of which is a recursive scan of the 
foundations of the consequent C of the conditional proof. The first step consists of tracing 
backwards through the antecedents of C until inhypotheses, oufhypotheses, or premises are 

reached. The search then follows the paths traced out in the opposite direction. Tracing 

♦ 

upwards from the terminal nodes, the scan marks each of the nodes encountered that is 
either one of the hypotheses or is a repercussion of a hypothesis. At the end of this step, all 
unmarked nodes are in the set of support of C. The second step finds the reduced set of 
support. This step again traces backwards through the antecedents of C. This tracing stops 
when an unmarked node is reached, or when a hypothesis is reached. When an unmarked 
node is encountered, it is included in the reduced set of support. Finally, all of the marks 
are removed. The nodes collected as the reduced set of support are separated into a set of 

in nodes and a set of out nodes. These can be used to create a SL-justification to support 
the implication. 
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E. Backtra cking 


"I should have more faith," he said; "I ought to know by this time that 
when a fact appears opposed to a long train of deductions it invariably 
proves to be capable of bearing some other interpretation." 

Sir Arthur Conan Doyle, A Study in Scarlet 

Systems engaging in hypothetical reasoning require mechanisms for reconciling 
beliefs upon the introduction of new hypotheses. Two types of hypotheses can be 
distinguished; speculative hypotheses and counterfactual hypotheses. Speculative 
hypotheses are those which are consistent with existing beliefs and justifications. 
Speculative hypotheses are useful when a lack of knowledge forces the making of an 
assumption for the purpose of exploration. Counterfactual hypotheses, on the other hand, 
contradict previous beliefs. Such hypotheses are useful in exploring the results of actions 
and in deriving constraints existing in different worlds. 

There is an overlap between these two forms of hypotheticals in a truth 
maintenance system. This overlap results from the orientation of the truth maintenance 
system towards apparent consistency. Since the only notion of inconsistency is that of 
contradictions, any set of beliefs not supporting a contradiction node is considered 
consistent. New information added by the external system may later show these beliefs to be 
inconsistent. Thus what may have originally been speculative hypotheses may later be 
discovered to be counterfactual hypotheses requiring special treatment. This treatment is 
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called backtracking. 

The procedure for dealing with contradictions is to determine the set of 
hypotheses underlying the contradiction. This set is inconsistent, and the inconsistency is 
resolved by rejecting belief in one or more of these hypotheses. It is desirable to discard as 
few hypotheses as possible, so the handling of counterfactuals has been characterized as the 
selection of a maximal consistent subset of the set of inconsistent hypotheses. This process 
of selection requires domain-specific knowledge, since as far as logic and truth maintenance 
systems are concerned, premises are independent of all other beliefs. This independence 
means that there are no inherent relations to other beliefs which can be used in 
discriminating among premises in consistent subset selection. PMMCS 

Unlike premises, assumptions can be related to each other and to other beliefs. 
Assumptions can be related to the reasons for their introduction and to the specific lack of 
information which permits their belief. An inconsistency involving assumptions indicates 
not only that one of the assumptions must be retracted, but also that belief is justified in one 
of the nodes whose lack of valid justifications lead, through the assumption, to the 
inconsistency. Thus, an inconsistency can be used to derive new information which controls 
the introduction and consideration of further assumptions. 

These mechanisms are embedded in truth maintenance systems in two ways. The 
making of speculative hypotheticals and the necessary reconciliation of these hypotheses 
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with previous justifications for belief are handled by the normal mechanisms of assumption 
justifications and truth maintenance processing. Backtracking is implemented in a truth 
maintenance system as the method of dependency-directed backtracking. This method uses 
the dependency relationships to provide the raw material for the analysis and 
summarization of the inconsistent set of hypotheses. 

The first step in the process of dependency-directed backtracking is the 
recognition of an inconsistency by means of a contradiction. This is a node, justified by the 
inconsistent beliefs, which the external system declares to represent a false belief. All 
contradictions have the semantics of false, so there need be only one such contradiction 
node, with new inconsistencies recorded as new justifications for this node. As far as the 
truth maintenance system is concerned there can be several representations for false, each of 
which is represented by a distinct contradiction node. 

The second step of backtracking is the determination of the inconsistent set of 
hypotheses underlying the contradiction. The wisdom of premises and monotonic 
justifications is inscrutable to the truth maintenance system. Therefore, the only hypotheses 
of interest to the backtracker are those based on incomplete knowledge. These are the 
assumptions. The assumptions are located by tracing backwards from the contradiction 
node through its antecedents, and watching for nodes which have out nodes among their 


antecedents. 
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Although the set of ah the assumptions supporting the contradiction is easily 
calculable, recording the inconsistency of this set directly may be inefficient. There is a 
definite structure relating these assumptions. Since the support of nodes is well-founded, the 
nodes may be arranged into a partial order. In this partial order, one node is "less than" 
another node if the first is an antecedent of the second. The complete partial order is 
derived as the transitive closure of this antecedence-based relation. Some assumptions will 
be independent of other assumptions in this order. Other assumptions will be dependent on 
lower level assumptions. This information is useful, because only those assumptions which 
are maximal in this partial order should be considered for retraction. 

An assumption should not be retracted if the contradiction depends on it by 
means of other assumptions. The backtracking procedure only makes logically necessary 
retractions based on the observed occurrence of contradictions. In general, there is not 
enough information to logically rule out lower level assumptions. That is, assumptions are 
retracted using their inconsistency with the set of other assumptions in force as a reason. 
The retraction of non-maximal assumptions would then depend on the continued belief in 
the maximal assumptions which depend on the lower level assumption. Since these higher 
level assumptions will in general depend crucially on the lower assumption, the attempt at 
retraction must fail. 

Other types of information can also be derived from the partial order. These 
allow discriminations on the basis of the height of an assumption in the partial order, or on 
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the size of the component of the partial order containing the assumption. Different 
strategies for ranking the assumptions correspond to different local search strategies. For 
instance, retracting the maximal assumption of greatest height in the partial order might be 
interpreted as a kind of depth-first strategy. However, from a global perspective, 
dependency-directed backtracking is neither depth-first nor breadth-first, since the global 
search order is determined primarily by the history of the search, and not by the local order 
of choosing among alternative assumptions for retraction. 


The third step of backtracking is the summarization of the inconsistency of the set 
of hypotheses underlying the contradiction. Suppose that S « {A, B, ... , Z} is the set of 
inconsistent assumptions. The backtracker then creates a NOGOOD, a new node 
signifying that S is inconsistent. The NOGOOD represents the fact that 

A. a ... a Z = false. 


or alternatively, that 


w (Aa ... A Z). 

S is called the NOGOOD-set of the NOGOOD. The summarization is accomplished by 
justifying the NOGOOD with a conditional proof of the contradiction relative to the set of 
assumptions. In this way, the inconsistency of the set of assumptions is recorded as a node 
which will be believed even after the contradiction has been disposed of by the retraction of 
some hypothesis. Note also that the NOGOOD will depend on any non-maximal 
assumptions not included in the NOGOOD-set. This means that future backtracking can 
reject each of the assumptions in the NOGOOD-set and still have some assumptions left to 



68 


reject. 


The last step of backtracking uses the summarized cause of the contradiction, 
represented by the NOGOOD, to both retract one of the inconsistent assumptions and to 
prevent future contradictions for the same reasons. This is accomplished by deriving new 
justifications for the out nodes underlying the inconsistent assumptions. The new 
justifications will cause one of these out facts to become in, thereby causing one of the 
offensive assumptions to become out. This step is reminiscent of the justification of results 
on the basis of the occurrence of contradictions in reasoning by reductio ad 
absu rdu m. Combin#,0ric# 

These new justifications are constructed as follows. Let the inconsistent 

assumptions be A ^. A n . Let .5,^ be the out nodes of the justification supporting 

belief in the assumption Aj. To effect the retraction of one of the assumptions, A^ justify 
Stf with the predicate 

(AND (IN NG A t ... A^A^ ... A n \ I (OUT S i2 ... 

that is, 

(AND (IN <NOGOOD> <other assumptions involved:.) 

(OUT <other denials of this assumptions) 

This will ensure that the justification supporting A i by means of this set of out nodes will 
no longer be valid whenever the NOGOOD (NG) and the other assumptions are believed. 
This process may be repeated for each assumption in the inconsistent set to try to ensure 
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that the contradiction will be removed even if some of the assumptions in the nogood-set 
have alternate means of support. However, this strategy will create a circularity containing 
these new justifications. While later backtracking may make this unavoidable, the 
immediate creation of a circularity can be avoided by making only one new justification. 
This new justification will neutralize the justification of one of the assumptions. If other 
support can be found for this assumption, then backtracking is repeated. Presumably the 
new invocation of the backtracker will find that the previous culprit is no longer an 
assumption. Backtracking halts when the contradiction becomes out, or when no 
assumptions can be found underlying the contradiction. 
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IV. Discussion 


A. Summary of the Key Ideas 

The major point stressed here is that careful recording of the logical support for 
program beliefs permits many important efficiencies and capabilities in reasoning programs. 
We feel that truth maintenance systems should be thought of as a systemic function of 
problem solving systems. Just as pattern-directed data bases form a naturally used 
subsystem of many problem solvers, so, we feel, should a truth maintenance system. 

. This report has elaborated the structure and use of a non-monotonic dependency 
system for representing knowledge about beliefs, the mechanisms by which a truth 
maintenance system can employ this representation of knowledge to maintain beliefs 
consistent with recorded justifications, the application of dependency relationships in 
effecting backtracking, and mechanisms for separating levels of detail and their 
dependencies. 

* 

The non-monotonic dependency system formalizes several ways of justifying 
beliefs including: premises, beliefs which are independent of other beliefs; deductions, 
beliefs derived from other beliefs; conditional proofs, beliefs summarizing the derivability 
of one belief from others; and assumptions, the non-monotonic justifications in which a 
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belief is based on a lack of contradictory knowledge. These basic representational 
techniques combine to allow perspicuous implementations of several common belief 
structures used in problem solving systems, including default assumptions, sets of 
alternatives and selectors of equivalence class representatives. 

Beliefs consistent with recorded justifications can be efficiently determined via 
truth maintenance, a process invoked whenever beliefs change due to the addition of new 
information or the retraction of hypotheses. Truth maintenance involves an examination of 
those beliefs explicitly linked, by means of the dependency system, to the changed beliefs. 
The truth maintenance system exercises the care required to avoid spurious beliefs produced 
by circularities among the justifications for beliefs. 

Exploiting all the facilities provided by the dependency and truth maintenance 
systems, dependency-directed backtracking examines the well-founded support recorded for 
beliefs involved in inconsistencies to determine the set of hypotheses underlying the 
inconsistency. Retraction of premises supporting an inconsistency is outside the domain of a 
truth maintenance system, but the dependency relationships involving non-monotonic 
assumptions can be analyzed to provide a basis for the retraction of assumptions. The 
causes of the inconsistency can be summarized via a conditional proof, and this summarized 
cause can then be used to retract one of the underlying assumptions. This is done by 
providing new knowledge which rules out belief in one of the assumptions. 
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Finally, the mechanism of conditional proof can be used to separate hierarchical 
levels of detail in explanations. The hierarchy is maintained by modifying arguments for 
beliefs. The modification consists of replacing a set of beliefs at one level by the set of 
higher-level beliefs from which they were derived. This is done by justifying information 
at one level in terms of the higher-level beliefs and the conditional proof of the 
corresponding information at the lower levels relative to the higher-level structures. This 
separation is important not only in improving the clarity of explanations, but in aiding 
processes like dependency-directed backtracking which must interrogate these explanations. 
In the case of dependency-directed backtracking, the separation of levels of detail reduces 
the number of belief involved in an inconsistency, thereby increasing the efficiency of the 
backtracking process. 
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B. Relation to Other Work 


There are systems oriented towards hierarchical representations of knowledge, but 
none of these systems deal with recorded justifications for beliefs. None of these systems 
address the problems raised by integrating the methods of truth maintenance and 
hierarchical representations of knowledge. 

There are several systems employing some form of data dependencies. One class 
of these uses explicit justifications for belief. These include the systems of Fikes [1975], 
McDermott [1975, 1977], Stallman and Sussman [1976], and London [1977]. Fikes’ data base 
system records sets of support for deductions, and uses these in automatically erasing data 
derived from other erased data. His system does not use multiple justifications for single 
beliefs, and does not use the dependencies to control search. McDermott’s earlier system also 
uses sets of supports as a data erasing mechanism, and allow multiple justifications for 
beliefs as well. These must lead to problems in his system, as no truth maintenance 
mechanism is used. McDermott’s later system is somewhat more developed, but incorporates 
a number of extraneous forms of information into the recorded data dependencies, thereby 
obscuring the problems of truth maintenance and control. Stallman and Sussman’s ARS 
electronics analysis system employs multiple sets of support and a monotonic truth 
maintenance system. ARS employs a mechanism for computing the sets of support of 
conditional proofs, but does not make these explicit as justifications. Instead of recording 
conditional proof justifications, the set of independent support is computed on the spot, and 
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never recomputed. ARS is a single-level system, and does not address the problem of 
separating levels of detail. London employs an extended Fikes-like dependency network in 
updating a simulation model. 

Another class of systems each use mechanisms suggestive of dependency 
mechanisms. These systems include Hayes' [1975] planning system^ Cox and Pietrzykowski's 
[1976] theorem prover, and Srinivasan’s [1976] MDS. Hayes' system is organized so that 
each decision made is associated with the set of other decisions which influenced the 
making of the decision. When surprises during plan execution invalidate a choice, these 
records are used to erase all decisions influenced by the invalid decision. Procedural 
methods seem to be used to connect decisions with the underlying domain knowledge. Cox 
and Pietrzykowski's graphical deduction system builds a proof in graph structure. When 
backtracking leads to the removal of a unification from the graph, the unification histories 
are employed to erase only that part of the graph that depended on the removed 
unification. Srinivasan's system associates with each assertion a set of other assertions 
which were accessed in checking the consistency of the assertion with the existing data base. 

Several systems employ forms of careful backtracking mechanisms. Stallman and 
Sussmans [1976] ARS system introduced the mechanism of dependency-directed 
backtracking. Katz and Manna [1976] use recorded dependencies between program 
invariants when an attempted proof of correctness fails. The dependencies are used first to 
search for a program statement to modify, and then to direct the updating of the other 
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invariants. Cox and Pietrzykowski’s [1976] graphical deduction system analyzes the 
unification histories recorded in building a proof graph. If progress is halted, the analysis 
performed by the backtracking algorithm indicates a unification which, if discarded, will 
allow further progress in the search. Nevins [1974] presents a theorem prover which 
examines the proof graph when a splitting attempt fails. Berliner’s [1974] chess program 
uses a perturbation technique (called the Causality Facility) to analyze the dependence 
features of the board situation on past moves. He also proposed the use of "lemmas" to 
record the reasons for ruling out possible moves. These lemmas are similar in nature to 
domain-specific NOGOODs, as they specify the conditions under which a move is bound to 
be bad. Latombe [1976] has indicated that his TROPIC system also performs clever 
backtracking. 

One related mechanism is the context mechanism employed by CONNIVER 
[McDermott and Sussman 1974] and QA4 [Rulifson, Derksen and Waldinger 1973]. The 
basic objective of both context and truth maintenance systems is the ability to reason 
without confusion when using several mutually contradictory sets of beliefs. Such 
conflicting sets of beliefs arise in reasoning about sequences of actions and in reasoning 
about hypothetical assumptions. Context mechanisms are fortuitously useful for reasoning 
about sequences of actions. This is because action sequences generate trees of incrementally 
different situations, and context systems are structured into trees of incrementally different 
contexts. In addition to being similar in structure to the trees of situations arising from 
action sequences, contexts allow simultaneous access to distinct situations. This means that 
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the properties of objects in one situation can be compared to the properties of the objects in 
another. Because truth maintenance systems cannot easil) inspect different situations, 
reasoning about actions in a truth maintenance system is awkward. 

On the other hand, contexts are inappropriate for reasoning about hypothetical 

assumptions. Many hypothetical are naturally independent. This allows changes of beliefs 

derived from one assumption to be unaffected by changes in beliefs in independent 

assumptions. Truth maintenance systems handle this easily. In context systems, 

hypothetical extensions of a context must be made in some particular order. This means 

that anomalous dependencies are unavoidable. Because of these anomalous dependencies, 

discarding one assumption by popping the corresponding context layer can result in 

discarding information derived from independent assumptions. This leads to the loss of 

useful information and wasted search efforts. Contexts can be viewed as approximating the 

logical dependencies between data. The problems introduced by the use of contexts are 

% 

therefore avoided by using the logical dependencies themselves to compute beliefs, rather 
than the approximate relationships of context membership. 
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C. Future Work 


You know my methods. Apply them. 

Sir Arthur Conan Doyle, The Sign of Four 

t 

Many of the topics discussed in this report offer opportunities for future 
exploration and elaboration. Some of these concern the use of a truth maintenance system 
in explanation and hypothetical reasoning. Other problems are in improving the technical 
details of implementing truth maintenance systems. This section discusses these areas for 
future research- 

A major application of the dependency relationships determined by a truth 
maintenance system is the explanation of computed entities in terms of the knowledge by 
which they were computed. The recorded justifications for beliefs only form the raw 
material from which explanations are to be constructed. The explanations produced by 
simple examinations of the justifications or foundations of beliefs are often cluttered with 
annoying details. Some of this unnecessary information can be removed by using the 

t 

conditional proofs to restructure and summarize arguments. This report has indicated 
techniques for using this mechanism in structuring the knowledge of a program into 
hierarchical levels of detail, but much interesting work seems possible in developing 
techniques by which query routines can perform dynamic restructuring of arguments. 
These restructurings might take into account the knowledge available to the listener and the 



78 


purpose of the explanation. (Cf. [Carr and Goldstein 1977]) 

Several topics of interest concern domain-independent methods in hypothetical 
reasoning. As indicated in the discussion of backtracking, there are several possible criteria 
for analyzing the structure of assumptions involved in inconsistencies. Further exploration 
of backtracking schemes employing these criteria might provide added efficiencies in 
backtracking. Related topics include the use of the dependency relationships alone as 
measures of the strength or stability of arguments, and in estimating the effects of changes 
in beliefs. 


A theoretical problem arising in the system is the development of a formal 
semantics for non-monotonic inference. Drew McDermott [personal communication] is 
developing one such semantics. 

The power of dependency-directed backtracking calls for integration of this 
method with knowledge-based methods of hypothetical reasoning. Programs with 
knowledge of the semantics of nodes can greatly increase the efficacy of the knowledge-free 
automatic methods by supplying measures for the soundness of premises and arguments in 
backtracking and differential diagnosis. McDermott’s [1974] TOPLE program, for instance, 
constructs what might be called abductive data dependencies to explain away 
inconsistencies. It would be interesting to investigate such methods in a system which also 
provided the deductive justifications presented here. Similarly, knowledge of the meanings 
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of the premises involved might be used in methods for generalizing the information derived 
from inconsistencies into more widely applicable rules. 

On a technical level, there are several algorithmic improvements to be made in 
the basic truth maintenance process itself. Speedups in truth maintenance processing might 
be gained if a better understanding is developed of the best order for examination and the 
analysis of circularities is improved. Efficient (or even correct) methods for evaluating 
conditional proof justifications when their hypotheses are not valid and for switching 
between sets of hypotheses need to be developed. 1 ® 0 Hard The use of multiple supporting- 
justifications for beliefs is a topic for study, especially with respect to the impact of such a 
mechanism' on the other truth maintenance mechanisms of backtracking and conditional 
proofs. Truth maintenance is an incremental process in the sense that only those beliefs 
affected by changes are updated, but there is another sense of incrementality in which the 
effects of changes in assumptions are calculated only if actually necessary. Unfortunately, 
the only methods I know for implementing such a call-by-need truth maintenance system 
require examining all beliefs, not just those affected by changes. David McAllester [1977] 
has developed a truth maintenance system based on a representation using propositional 
clauses in conjunctive normal form. This representation allows several algorithms (such as 
truth maintenance and dependency-directed backtracking) to be unified into one algorithm. 

One important problem is the detailing of methods integrating the use of 
dependencies with the sharing of data. Fahlman's [1977] NETL system avoids explosions of 
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computation space by using "virtual copies” of pieces of information. Straightforward 
schemes for using recorded justifications require explicit copies of the information, and 
cannot deal with shared structure. It would be very valuable to develop methods for this 
integration, perhaps of the nature of shared or virtually-copied dependency structures. 

Finally, there are many interesting applications of dependencies to problems of 
control in problem solving systems. Explicit justifications allow the separation of the control 
and the knowledge embodied by the problem solver, since the problem solver can make 
derived knowledge depend only on non-control information. At the same time, 
dependencies permit explicit linking of control decisions to the information and decisions 
they are based on, opening the possibility for careful failure analysis by the problem solving 
interpreter. (Cf. [de Kleer, Doyle, Steele and Sussman 1977]) There are many problems for 
investigation in explicit reasoning about the justifications themselves (for instance, in 
reasoning about the existence of multiple proofs for some result). 
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Notes 


AMQRD 

AMORD [de Kleer, Doyle, Rich, Steele and Sussman 1977] is a simple problem 
solving system devloped to illustrate the technique of using explicit control statements and 
dependencies in the control of reasoning, [de Kleer, Doyle, Steele and Sussman 1977] 

NOGOOD 

Records indicating sets of inconsistent assumptions were called NOGOODs in 
Stallman and Sussman's [1976] ARS. 

Logics of Belief 

Hintikka [1962] and other philosophers have made extensive studies of the logics 
of knowledge and belief. A logic of beliefs seemingly related to that used in a truth 
maintenance system is discussed by Belnap [1976]. 

THNOT 

The non-monotonic assumption justification are the dependency system analogue 
of Micro-PLANNER’s THNOT primitive. [Sussman, Winograd and Charniak 1971] Other 
related concepts are McCarthy and Hayes’ [1969] CONSISTENT predicate, Sandewall’s 
[1972] UNLESS predicate, a[nd McDermott’s [1977] PRESUMABLY. The non-monotonic 
assumption justifications have an advantage over these systems in that the nature of the 
assumption is made explicit and accessible in future deductions. This allow data derived 

from an assumption to be automatically discarded when new information overrides the 
assumption. 

NEEDCHOICE 

ARS [Stallman and Sussman 1976] represents the reasons for making assumptions 
as NEEDCHOICE assertions. Since ARS uses a monotonic dependency system, procedural 
mechanisms are necessary to connect these NEEDCHOICE assertions with the assumptions 
they control during backtracking and truth maintenance. 

Propagation 

Equivalence classes arise naturally when using methods which propagate 
information through a fixed knowledge structure. A good example is the EL electronic 
circuit analysis program. [Stallman and Sussman 1976] This program makes a fundamental 
use of coincidences and contradictions between voltages and currents in its method of the 
propagation of constraints. 

Interfaces 

The mechanism for separating levels of detail also applies to interfaces between 
independent systems. In these interfaces, each side of the boundary looks like a call on the 
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other side. Such interfaces can be described by using conditional proofs to transmit 
information in both directions. This requires that the names of each of the sides of the 
boundary to be attached to the boundary. 

Slices 

Slices [Sussman 1977] are a way of representing multiple overlapping views of 
objects. They provided a major source of the motivation for developing our methods of 
separating levels of detail in explanations. 

Complexity 

Part of the abstract problem of truth maintenance is to find an assignment of 
states to nodes consistent with a set of logical constraints relating these states. This is 
reminiscent of the problem of finding a satisfying assignment of values to variables in a 
propositional formula. It is easy to construct a correspondence between truth maintenance 
and the satisfaction of propositional formulas. I attempted to use such a correspondence to 
show that the problem faced by truth maintenance was NP-complete. [Cook 1971, Karp 
1972] I failed because the set of constraints relating beliefs is guaranteed to be satisfiable 
(since unsatisfiable constraints are ruled out as program bugs). This foiled my attempts to 
invoke the NP-completeness of problems like CNF-SAT and DNF-UNSAT in my proof. 

Efficiency 

There are several variations on the algorithm for truth maintenance presented 
here. The major dimension for variation concerns the order in which the graph of nodes 
and justifications is searched. Our algorithm uses a depth-first search. Other orders are 
possible. The most desirable would be one which always found support for the node being 
searched, and determined the set of nodes involved in circularities with as little trouble as 
possible. 

Analysis 

The efficiency of the relaxation process might be improved by using some form of 
analysis of circularities. For instance, the set of nodes left unsupported by the first step of 
truth maintenance can be analyzed as a graph to find the strongly connected components. 
These components are related by a partial order. The most efficient procedure would to 
determine support for nodes in the components which are minimal in this partial order, 
since these might provide support for node in non-minimal components. 

FINDINDEP 

This procedure was given the name FINDINDEP in Stallman and Sussman’s 
[1976] ARS system. 

PMMCS 

Nicholas Rescher [1964] presents a solution to the problem of counterfactual 
conditionals based on the concept of Preferred Maximal Mutually Compatible Subsets of 
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beliefs. His method partitions the set of all beliefs into compatible subsets of beliefs. Some 
of these sets may be preferable to others. For instance, if an inconsistency involves an 
expei imental hypothesis and a law of nature, it is preferable to surrender the experimental 
hypothesis (as in Back to the drawing board.”). If such preferences were available to the 
dependency-directed backtracking system, it would be possible to retract premises as well as 
assumptions. On the other hand, one can argue that the partial order discrimination used 
in selecting assumptions for retraction is in fact a dynamically computed preference measure 
on the different out nodes involved in the inconsistency. 


Combinatorics 

Dependency-directed backtracking offers two main sources of efficiency over 
chronological backtracking methods, such as that used in Micro-PLANNER. [Sussman, 
Winograd and Charniak 1971] One advantage is that irrelevant choices made 
chronologically later than a faulty choice are ignored. This saves the system from 
considering many useless combinations of choices. In addition, it allows deductions made on 
the basis of faulty choices to be distinguished from those stemming from irrelevant choices. 
This means that the truth maintenance system need only discard those deductions based on 
retracted assumptions. Another advantage of dependency-directed backtracking is in the 
summarization of the inconsistency of certain sets of assumptions. Because these 
summarizations are valid beyond the existence of the inconsistency, the system automatically 
prevents any future set of assumptions from including the inconsistent set as a subset. This 
leads to the avoidance of more pointless combinations of assumptions. The power of 
dependency-direction is illustrated by Stallman and Sussman [1976], who present an example 
in which traditional methods of backtracking would consider a number of states equal to 
the the product of the sizes of the independent choice-sets. The use of dependency-direction 
reduces the number of states considered to the sum of the sizes of the independent choice- 
sets G. J. Sussman has informed me of a specific example of interest. In a particular six 
transistor circuit, dependency-directed backtracking reduces the number of contradictions to 
only 2. This is using a standard heuristic order when choosing transistor states. 
Traditional backtracking methods might consider 3**6 - 729 states in this example. The 

number of contradictions increases to only 13 when the heuristically worst choice is made in 
each decision. 


Too Hard 

The problem of evaluating the validity of conditional proofs may be too hard in 

general. If the hypotheses of the conditional proof are not valid, that is, if the inhypotheses 

are not in and the owrhypotheses are not out, the evaluation requires switching beliefs so 

that the hypotheses are valid. This may require recursive truth maintenance, which in turn 

may call for further evaluation of conditional proof justifications. I have no algorithms for 

this process. It may be that the difficulty of this problem requires that such conditional 

proofs be left to the problem solver, reserving only the simple cases for the truth 
maintenance system. 
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Appendix 1. A TMS Glossary 


Aldiborontiphoscophornio! 

Where left you Chrononhotonthologos? 

Henry Carey, Chrononhotonthologos 


The AFFECTED-CONSEQUENCES of a node are those nodes whose current support- 
status rests on the node; precisely, those consequences of the node such that the node is a 
supporting-node of each of these consequences. 

The ANCESTORS of a node are those nodes involved at some level in determining the 
current support-status of the node; precisely, the transitive closure of the set of supporting- 
nodes of the node under the operation of taking supporting-nodes. 

ANOMALOUS CHRONOLOGICAL DEPENDENCIES are present when beliefs depend 
unnecessarily on other, logically independent beliefs. A good example of such anomalous 
dependencies are those seen in Micro-PL ANNER, where each assertion depends on all 
chronologically previous choices, regardless of considerations of the logical relations between 
the assertion and the choices. 

The ANTECEDENTS of a node are those nodes which currently support belief in the 
node. The antecedents of a node are the same as the SUPPORTING-NODES if the node 
is in. Nodes which are out have no antecedents. 

ASSU MPTIONS are nodes justified by non-monotonic justifications. The addition of new 
knowledge can cause the justifications for belief in assumptions to become invalid. 
Specifically, an assumption is a node believed on the basis of a lack of knowledge about 
some .other belief. A typical form of an assumption is a node F whose justification is the 
predicate (OUT ~F), where ~F denotes the negation of F. In this case, belief in F will be 
justified as long as contradictory knowledge is not present. 

BACK TRACKING is the process of undoing a failure or inconsistency by retracting some 
premise or assumption underlying the failure or inconsistency. 

BELIEF in a node results from knowledge of a valid justification. 

CHRONOLOGY describes the dependence of actions on the temporal ordering of their 
execution. 


M 



88 


CIRCULARITIES can occur in dependency relationships. These circularities require 
special processing during truth maintenance. 

CONDITIONAL PROOFS are justifications which support a belief if a specified belief 
(the consequent of the conditional proof) is believed when given specified hypotheses (the 
hypotheses of the conditional proof). 

The CONSEQUENCES of a node are those nodes such that the node occurs in an 

■ . . . — ■ 

justification of each consequence. 

A CONTRADICTION is a node which has been designated as an inconsistency to the 
truth maintenance system. The backtracking mechanisms attempts to ensure that no 
contradiction is believed. 

The CP-CONSEQUENT-LIST of a node contains those nodes possessing a CP- 
JUSTIFICATION with the node as the consequent of the conditional proof. 

A DEDUCTION is a type of justification for belief in a node in which belief in the node is 
justified if each node in a designated set of nodes is believed. 

DEPENDENCIES are relationships between beliefs. The most generally useful 
dependencies in a truth maintenance system are the relations of ANTECEDENTS. 
CONSEQUENCES, SUPPORTING-NODES and AFFECTED-CONSEQUENCES. 

DEPENDENCY-DIRECTED describes processes, such as DEPENDENCY-DIRECTED 
BACKTRACKING, which operate on beliefs by searching through the nodes related by 
dependencies to the beliefs. 

FINDINDEP is a procedure for determining the set of nodes which are the independent 
support of a belief relative to a specified set of beliefs. This procedure is the basis for 
mechanisms dealing with summarization by conditional proofs. 

The FOUNDATIONS of a node are those nodes involved in the well-founded support for 
belief in the node; precisely, the transitive closure of the antecedents of the node under the 
operation of taking antecedents. 

% 

A HYPOTHESIS is an underived belief, that is, either a PREMISE or an 
ASSUMPTION. Hypotheses of conditional proof justifications need not be premises or 
assumptions — they are just treated as such for the purposes of the conditional proof. 

IN describes the condition of a node which is believed to be true due to knowledge of a 
valid justification supporting this belief. 
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An JUSTIFICATION of a node is a representation of a reason for belief in the node. 
There are two basic representations used in the truth maintenance system presented here, 
called support-list justifications (SL-JUSTIFICATIONS) and conditional-proof justifications 
(CP-JUSTIFICATIONS). 

The JUSTIFICATION-SET of a node is the set of justifications for belief in the node. 

MONOTONIC TRUTH MAINTENANCE SYSTEMS are systems in which belief in a 
node cannot be predicated upon a lack of belief in some other node. 

A NODE is the fundamental entity to which justifications for belief can be attached. 

A NOGOOD is a node summarizing the independent support of a contradiction relative to 
the set of assumptions underlying the contradiction. 

A NOGOOD-SET is a set of assumptions designated to be inconsistent by a NOGOOD. 

NON-CHRONOLOGICAL describes processes in which the order of actions does not 
affect the results, so that the relationships between the data produced can be summarized in 
time-independent, logical terms. 

OUT describes the condition of a node for which no valid justifications are known. 

A PREMISE is a belief which depends on no other beliefs. 

The REPERCUSSIONS of a node are those other nodes whose support-statuses are 
affected at some level by the support-status of the node; precisely, the transitive closure of 
the affected-consequences of the node under the operation of taking affected-consequences. 

A SL-JUSTIFICATION consists of a two lists of nodes, the enlist and the ouflist. It is valid 
if each node in the enlist is in, and each node in the ouflist is out. 

The STATUS of a node normally refers to the SUPPORT-STATUS of the node. 

The SUPPORT for a belief is a generic term and may refer to the SUPPORTING- 
JUSTIFICATION, ANTECEDENTS, SUPPORTING-NODES, FOUNDATIONS or 
ANCESTORS of the node, depending on the context of usage. 

The SUPPORT-STATUS of a node is another name for the fnness or outness of the node. 

The SUPPORTING-JUSTIFICATION determines a proof of belief in the node in terms 
of other nodes with well-founded (non-circular) support. 


11 
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The SUPPORTING-NODES of a node is the set of nodes affecting the current support- 
status of the node. 

TRUTH MAINTENANCE refers to the process by which beliefs are redetermined when 
other beliefs change due to the addition of new information or the retraction of premises. 

TRUTH MAINTENANCE SYSTEMS are systems in which beliefs are determined from 
recorded logical justifications. 

UNSATISFIABLE DEPENDENCY RELATIONSHIPS are cycles of justifications such 
that no assignment of in or out to the nodes involved is consistent with the justifications 
recorded for belief in the nodes. 

VALID IUST1FICATIONS are justifications which as predicates evaluate to true. 

WELL-FOUNDED SUPPORT for a belief is an argument in terms of the recorded 
justifications from the basic premises and assumptions, of the system upwards with no cycles 
in the arguments. 
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Appendix 2. Monotonic Truth Maintenance Systems 


In monotonic truth maintenance systems, no belief can depend upon other nodes 
being out. With this restriction, the inning of a node cannot cause the outing of another. 
Truth maintenance processing is simpler to implement in a monotonic system than in the 
non-monotonic system described in the text. The monotonic system also has many of the 
same uses and general properties. The basic limitation of the monotonic dependency system 
is its inability to model assumptions. The lack of non-monotonic justifications means that 
procedural mechanisms for making assumptions must be used. These procedural devices 
must be able to handle all the problems involving circularities that are exhibited in the 
non-monotonic system. The procedural mechanisms must be able to effect non-monotonic 
inferences, and connect assumptions with the reasons for being made. 

The representation of justifications can be simplified somewhat in a monotonic 
truth maintenances system. A SL-justification becomes a single list of nodes. CP- 
justifications have only one list of hypotheses. The concepts of consequences, supporting- 
justifications, supporting-nodes, ancestors and repercussions are as in the non-monotonic 
case. In a monotonic system, the list of supporting-nodes of a node is identical to the list of 
nodes in the supporting-justification. 
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The process of truth maintenance is simplified somewhat in a monotonic system. 
It is conveniently divided into two processes; outing and unouting . The process of outing 
occurs whenever a node is changed from in to out. It proceedes by {1} making a list of the 
invoking node and its repercussions, {2} setting the support-status of each of these nodes to 
out , {3} removing the supporting-justifications from each of the nodes. After these steps 
have been performed for each of the nodes in the list, each of the nodes is unouled. 

The unouting of a node proceeds by examining the justification-set of the node 
for an SL-justification containing only in nodes. If such an justification is found, it is made 
the supporting-justification of the node, the node’s support-status becomes in, and all out 
consequences of the node are unouted recursively. The handling of CP-justifications is 
essentially unchanged from that described previously for non-monotonic systems. 

The major effect of monotonicity is that the mechanisms for making and 
maintaining assumptions must be done by means external to the truth maintenance system. 
One method for effecting non-monotonic relationships is that of using forget and recall 
functions, which are functions attached to the node. A forget function is run whenever the 
attached node is oute d, and a recall function is run whenever the attached node is toned. 
To implement the assumption of a node F using such functions, a forget function can be 
attached to ~F such that if ~F is oute d, F will be made in (as a premise), along with a 
recall function on ~F which will out F (by retracting it) if ~F is toned. In addition, these 
functions should also check to make sure that the node representing the reason for making 


11 
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the assumption is in. The use of a mechanism like this dangerous. Because functions are 
being used instead of explicit justifications, the recognition and handling of circularities and 
inconsistencies are obscured. Because of the chronological nature of these functions, no 
guarantee can be made that all feasible selections of statuses can be made in the event of 
circularities. Also, unsatisfiable circularities in the dependency structures may be 
undetectable, ensuring an infinite loop of assuming, unoufing, outing, and reassuming. 

Many of the applications of the general truth maintenance system are also possible 
using a monotonic system. The uses of dependencies in explanation, generalization and 
separation of levels of detail, and in dependency-directed backtracking are similar to those 
in the non-monotonic system. Backtracking is affected by the fact that assumptions can not 
be made through the use of the dependencies. Because of this, each node representing an 
assumption must be explicitly marked as such so that the backtracker can recognize it as an 
assumption. In addition, while nogoods are representable as before, the ruling out of 
inconsistent sets of assumptions cannot be done by means of new justifications, but must 

i 

operate by external mechanisms. 


r I 
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Appendix 3. An Implementation of a TMS 


This appendix presents the February, 1978 version of the TMS. A set of 
descriptions of the functions are provided, followed by the MacLISP programs. 


TMS-MAKE-NODE -- (ths-hake-node <«xt«rni I -naM>) 

This function creates a new TMS-node with a given name. 

TMS-SL-IUSTIFY — (THS-SL-JUSTIFY <nod«> <incupport«rs> <outiupport«r*> <arguMnt>) 

This function gives a TMS node a new support-list type justification, which is valid 
if each of the nodes of the insupporters list is in, and each of the nodes of the outsupporters 
list is out. The argument is an uninterpreted slot used to record the external form of the 
justification, and is retrievable via the TMS-JUSTIFICATION-ARGUMENT function 
described below. 

TMS-CP-1USTIFY 

<Tf1S-CP-JUSTIFY <node> <consequent> <inhypotheses> <outhypoth#sti> <argument>) 

This gives a TMS node a new justification which is valid if, when the inhypotheses 
are in and the out hypotheses are out, the consequent node is believed. As in TMS-SL- 
JUSTIFY, the argument is an uninterpreted record of the external form of the justification. 

TMS-PROCESS-CONTRADICTION 

(TMS-PROCESS-CONTRRDICTION <nama> <nodo> <typo> <contrad let ion-funct ion>) 

This declares a TMS node to represent a contradiction. The name and type are 
uninterpreted mnemonics provided by the external system to be printed out during 
backtracking. The contradiction-function, if supplied, should be a LISP function to be 
called with the contradiction node as its argument when the backtracker can find no 
backtrackable choicepoints. 

TMS-SUPPORT-STATUS — (tus-support-stotus <nod«>> 

This function returns the support-status, either ’IN or ’OUT, of a node. 

TMS-IUSTIFICATIONS — cms-JUSTiFicnnoNS <nod«>> 

This function returns the list of justifications of the node. This list contains both 
the support-list and conditional-proof justifications attached to the node 

TMS-SUPPORTING-IUSTIFICATION — <tiis-supporting-justification <nod«>> 

This function returns the current justification of the node. 
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TMS-IUSTIFICATION-ARGUMENT — (Tns-JUSTiFiCfiTlON-RRGunENT <justif I cation>) 

This function returns the externa] argument associated with the given justification. 

TMS-ANTECEDENTS -- (Ths-rntecedents <nod«>) 

This function returns the list of nodes determining well-founded support for the 
given node. This list is extracted from the supporting-justification if the node is in, and is 
empty if the node is out. 

TMS-CONSEQUENCES — (Ths-consequences <nod«>> 

This function returns the list of nodes whose list of antecedents mentions the given 

node. 

TMS-EXTERNAL-NAME -- (Tos-external-nrue <nod«>) 

This function returns the user-supplied name of a node. 


TMS-IS-IN -- (TUS-IS-IN <nod«>) 

This predicate is true iff the node is in. 


TMS-IS-OUT -- (TUS-IS-OUT <nod«>) 

This predicate is true iff the node is out. 

TMS-RETRACT — (tus-retrrct <nod«>) 

This function will remove all premise-type justifications from the set of justifications 
of the node. 

TMS-PREMISES -- (Tns-PREniSES <nod«>> 

This function returns a list of the premises among the foundations of the node. 

TMS-ASSUMPTIONS -- (Tns-flssunPTiONS <nod«>> 

This function returns a list of the assumptions among the foundations of the node. 

TMS-INSTALL-SIGN AL-FORGETTING-FUNCTION 

“ (TUS-INSTRLL-SIGNRl-FORGETTING-FUNCTION <nod*> <fun>) 

This function sets the LISP function that the TMS will use to signal the changing 
of the support-status of the node from in to out. When such a change occurs, the supplied 
function will be called with the external name of the node as its argument 

TMS-INSTALL-SIGNAL-RECALLING-FUNCTION 

-- (THS-1NSTRLL-SIGNfll-RECRLLING-FUNCTION <nod«> <fun>) 

This function sets the LISP function that the TMS will call with the node’s external 
name as its argument when changing the support-status of the node from out to in. 
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The TMS also generates new "facts" internally during backtracking. These will 
therefore occur in explanations and antecedents of the nod ;s requested and justified by the 
external systems. The internal facts generated by the TMS are atomic symbols with certain 
properties. The following functions are provided to manipulate these internal facts. 

TMS-FACTP -- (TnS-FBCTP <thing>) 

This predicate is true iff the thing is an internal TMS fact 

TMS-F ACT-NODE -- (Tus-frct-nooe <f«ct>> 

This function returns the TMS node associated with an internal fact. 

TMS-F ACT-STATEMENT -- (ths-frct-strtehent <fact>> 

This function returns the symbolic statement of the meaning of an internal fact 
This statement refers to the external names of th * other facts, such as contradictions and 
assumptions, which were involved in the making of the fact 


The following two functions are supplied for debugging purposes. 

TMS-INIT -- (THS-INIT) 

This function clears the state of the TMS by resetting all internal variables and 
clearing all properties and internings of TMS nodes. 


The TMS has the following switches which may be set for wallpaper purposes. 

Variable ( Default value) 

#TMS-SEE-TMP-SW# (NIL) 

Announces truth maintenance processing. 

*TMS-SEE-TMP-INVOKER-SW* <T> 

Controls printing of nodes invoking truth maintenance processing if oTMS-SEE- 
TMP-SW* is set. 


*TMS-SEE-JUSTIFY-SW* (NIL) 

Announces the addition of a new justification for a node 

#TMS-SEE-CONTRADICTIONS-SW* (T> 

Announces the processing of a contradiction. 


The program as follows uses several macros. 
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is equivalent to 


(LET ((varl initl) — (varn initn)) body) 

((LflttBOR (varl-varn) body) initl — initn). 


(EQCRSE axp (vail bodyl) — ) 

is effectively equivalent to 

(COND ((eq exp ’vail) bodyl) —-). 

The last clause in an EQCASE may begin with the value ELSE, which forms a catch-all 
clause at the end of the COND. The macro-character " quotes the following form, 
substituting in the values of any forms preceded by the macro-character , and inserting as a 
list segment the value of any form preceded by the macro character •. 



TRUTH MAINTENANCE SYSTEM GLOBAL VARIABLES 


APPNDX 3 Pag# 1 


eei 

082 

883 

004 

005 

006 

007 

008 

009 

010 

811 

812 

013 

014 

015 

016 

017 

018 

019 

020 

021 

022 

023 

024 

025 

026 

027 

828 

829 

030 

831 

832 
033 
034 
035 
036 
037 
038 
039 
040 
041 
042 
043 
044 
845 
046 
047 
048 
049 
850 
051 

852 

853 
054 
055 
056 
057 
058 
059 
060 
061 
062 
063 
064 
065 


(COMMENT TRUTH MAINTENANCE SYSTEM GLOBAL VARIABLES) 
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THIS OECLRRRTION SPECIFIES RLL OF THE SWITCHES NECESSARY TO COMPILE THE THS. 
THESE INCLUDE THE LORDING OF fl FILE OF HRCROS USEO IN THE TEXT, RNO DECLARATIONS 
;;; OF SOME LISP FUNCTIONS USEO BY THE PROGRAN. 


• t • 

9ft 


(DECLARE (MAPEX T) 

(EXPR-HRSH T) 

(HRCROS NIL) 

(FRSLORD LIMIT FRSL DSK AMORD) 
(SPECIAL BASE *NOPOINT> 

(♦FEXPR GCTWA)) 


;OPEN COOE LOOPS 
{ENABLE RECOUPILATION HACKS 
{RETAIN NO HACRO DEFINITIONS 
{LORO IN MACROS 


THIS OECLRRRTION SPECIFIES RLL OF THE GLOBAL VARIABLES USED IN THE THS. 
*TnS-NOTED-IN~NOOES* IS USEO DURING TRUTH HAINTENANCE TO ACCUHULATE A LIST 
OF ALL NODES EXAMINED BY TRUTH HRINTENRNCE UHICH HERE IN UPON ENTRY TO 
THE EXAMINATION PROCESS. 

*TMS-NOTED-OUT-NODES* ACCUMULATES ENTERING OUT NOOES DURING TRUTH MAINTENANCE. 
*TMS-PROCESS-QUEUE* IS USED TO QUEUE UP NOOES FOR EXAMINATION FOR UELL-FOUNOEO 
SUPPORT OURING TRUTH MAINTENANCE. 

♦TMS-CONTRADICTION-ASSUHPTIONS* IS USED DURING BACKTRACKING TO ACCUMULATE AN ALIST 
OF ASSUMPTION NOOES AND THE LISTS OF OUT NODES THEY DEPEND UPON. 

♦TMS-FINDINDEP-IN-LIST* ACCUMULATES IN NOOES DURING TMS-FINDINDEP PROCESSING. 
*THS-FINDINDEP-OUT-LIST* ACCUMULATES OUT NOOES DURING TMS-FINDINDEP PROCESSING. 
♦TMS-SEE-JUSTIFICATIONS-SW* CONTROLS UALLPRPER PRINTING DURING THE TMS-XX-JUSTIFY 
FUNCTIONS. 

♦THS-SEE-TMP-SU* CONTROLS WALLPAPER PRINTING DURING THE MAIN TRUTH MAINTENANCE FUNCTION. 
♦TMS-SEE-TNP-INVOKER-SW* CONTROLS WALLPAPER PRINTING DURING THE MAIN TRUTH MAINTENANCE 
FUNCTION OF WHICH NOOE CAUSED TRUTH MAINTENANCE. 

♦TMS-SEE-CONTRAOICTIONS-SW* CONTROLS WALLPAPER PRINTING OF BACKTRACKING DUE TO 
CONTRADICTIONS. 

♦TMS-SEE-CULPRITS-SW* CONTROLS WALLPAPER PRINTING OF THE ASSUMPTIONS UNDERLYING 
CONTRADICTIONS DURING BACKTRACKING. 

♦TMS-GENS* STORES THE CURRENT GENSYM NUMBER. 

♦TMS-GENS-LIST* ACCUMULATES A LIST OF ALL SYMBOLS GENSYMED BY TMS-GENS. 

♦TMS-INTERN-SW* CONTROLS THE INTERNING OF GENSYMED SYMBOLS HADE BY TMS-GENS. 

STIMULATE IS A FUNCTION CALLED WHEN A NOOE GOES FROM IN TO OUT DURING TRUTH HRINTENRNCE. 
IT IS GIVEN THE EXTERNAL NAME OF THE NOOE AS ITS ARGUMENT. 

DESTIHULRTE IS A FUNCTION CALLED WHEN A NOOE GOES FROM OUT TO IN OURING TRUTH MAINTENANCE 
IT IS GIVEN THE EXTERNAL NAME OF THE NODE AS ITS ARGUMENT. 

(DECLARE (SPECIAL *THS-NOTEO-IN-NOOES* 

♦THS-NOTEO-OUT-NOOES* 

♦THS-PROCESS-QUEUE* 

♦TMS-CONTRADICTION-ASSUMPTIONS* 

♦THS-FINDINOEP-IN-L1ST* 

♦TMS-FINDINDEP-OUT-LIST* 

*TMS-SEE-TMP-SW* 

♦TMS-SEE-THP-INVOKER-SW* 

♦THS-SEE-JUSTIFICATIONS-SW* 

♦TMS-SEE-CONTRAOICTIONS-SW* 

♦TMS-SEE-CULPRITS-SW* 

♦TMS-GENS* 

♦TMS-GENS-LIST* 

♦TMS-INTERN-SW*) 


(*EXPR STIMULATE 

DESTIHULRTE)) 
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;; THIS FUNCTION IS THE MEANS BY WHICH THE TMS GENERATES NEW SYMBOLS. 

;; THE SYMBOLS GENERATED ARE RECOROEO ON A LIST TO FACILITATE REINITIALIZATION. 
;; NORMALLY, THE SYMBOLS ARE NOT INTERNED. 

;; BASE AND *NOPOINT ARE SPECIAL LISP VARIABLES. 

;; THEIR REBINDING AVOIDS PROBLEMS DUE TO USER SETTINGS OF THESE VARIABLES. 

(DEFUN THS-GENS (X) 

(SETQ *TMS-GENS* (1+ *TMS-GENS*)) 

((LAMBDA (NAME) 

(AND *TMS-INTERN-SW* (INTERN NAME)) 

(SETQ *TMS-GENS-L1ST* (CONS NAME *TMS-GENS-LIST*)) 

NAME) 

(MAKNAM (APPEND MT M S -) 

(AND X (NCONC (EXPLODEC X) ’(-))) 

((LAMBDA (BASE *NOPOINT) 

(EXPLODEC *TMS-GENS*)) 

8 . T)))>) 


(SETQ *TMS-GENS* 0) 

(SETQ *TMS-GENS-LIST* NIL) 

(SETQ *TMS-INTERN-SW* NIL) 

5 ;; THESE INITIALIZE THE SYSTEM SWITCHES CONTROLLING WALLPAPER PRINTING. 

(SETQ *TMS-SEE-TMP-SW* NIL) 

(SETQ *THS-SEE-TMP-INVOKER* NIL) 

(SETQ *TMS-SEE-JUSTIFICATIONS-SW* NIL) 

(SETQ *TMS-SEE-CONTRADICTIONS-SW* T) 

(SETQ *TMS-SEE-CULPRITS-SW* NIL) 

;;; THIS FUNCTION INITIALIZES THE INTERNAL STATE OF THE TMS. 

;;; IT CAN BE CALLEO ANY NUMBER OF TIMES. 

U$ AFTER IT IS CALLEO, NO TMS OATA STRUCTURES SHOULD REMAIN 
55 ; EXCEPT THOSE POINTEO TO BY USER VARIABLES. 

(DEFUN TMS-INIT () 

(SETQ *TMS-NOTED-IN-NODES* NIL) 

(SETQ *THS-NOTEO-OUT-NODES* NIL) 

(MAPC ’ (LAMBDA (G) (MAKUNBOUND G) (SETPLIST G NIL) (REMOB G)) 
♦TMS-GENS-LIST*) 

(SETQ *TMS-GENS-L1ST* NIL) 

(SETQ *TMS-GENS* 0) 

(GCTWA T) 

’DONE) 


(TMS-INIT) 
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(COMMENT TRUTH MRINTENRNCE DATA STRUCTURES) 

;;; TMS NODES HAVE THE FOLLOWING ATTRIBUTES KEPT IN A SPECIAL DATA STRUCTURES 
;;; TMS-FINDINDEP-MARK 

;;; THIS IS A BIT USED TO INDICATE WHETHER THE NOOE IN QUESTION HAS BEEN 
;;; EXAMINEO BY THE TMS-FINDINDEP SWEEP PHASE. 

;;; TMS-SUBORDINATES-HARK 

;;; THIS BIT IS USED IN THE UPWARD PHASE OF THE TMS-FINDINDEP PROCESS 
;;} TO MARK EACH NODE WHICH HAS ANY OF THE HYPOTHESES OF THE CONDITIONAL 
;;; PROOF OR THEIR CONSEQUENCES AMONG ITS SUPPORTERS. 

;;; TMS-SUPERIORS-MARK 

;;; THIS IS A THREE-WAY INDICATOR USEO DURING BACKTRACKING TO SHOW WHETHER THE 
;;; NODE HAS ASSUMPTIONS AMONG ITS CONSEQUENCES, OOES NOT HAVE SUCH CONSEQUENT 
;;; ASSUMPTIONS, OR HAS NOT BEEN EXAMINED YET. 

;;; TMS-TMP-MARK 

;;; THIS BIT SHOWS WHETHER THE NODE IS QUEUED UP TO BE EXAMINED DURING TRUTH 
;;; MAINTENANCE PROCESSING. IT SAVES DOING A MEMQ DOWN A FREQUENTLY LARGE LIST. 

;;; TMS-NOTEO-MARK 

;;; THIS BIT SHOWS WHETHER THE NOOE HAS BEEN REACHEO BY THE CURRENT INVOCATION 
;;; OF TRUTH MAINTENANCE. IT SAVES DOING A MEMQ DOWN ANOTHER FREQUENTLY LARGE LIST. 

;; 5 TMS-SUPPORT-STATUS 

;;; THIS THREE-WAY INDICATOR SHOWS WHETHER THE NOOE IS IN, OUT, OR IS STILL BEING 
;;; EXAMINEO (NIL). 

;;; THS-SL-JUSTIFICATIONS 

5 ;; THIS IS A LIST OF ALL OF THE SUPPORT-LIST JUSTIFICATIONS POSSESSED BY THE NOOE. 

;;; TMS-CP-JUSTIFICATIONS 

;;; THIS IS A LIST OF ALL OF THE CONDITIONAL-PROOF JUSTIFICATIONS POSSESSED BY THE NODE. 

;;; TMS-SUPPORTING-JUSTIFICATION 

;;; THIS IS A POINTER TO THE CURRENTLY SUPPORTING JUSTIFICATION IF THE NOOE IS IN, 

5 5 5 OR NIL IF THE NODE IS OUT. THE POINTER IS ALWAYS TO A SUPPORT-LIST JUSTIFICATION, 

;;; NEVER TO A CONDITIONAL PROOF JUSTIFICATION. CP-JUSTIFICATIONS ARE CONVERTED TO 
;;; SL-JUSTIFICATIONS USING TMS-FINDINDEP. 

TMS-SUPPORTING-NODES 

;;; THIS IS A LIST OF ALL NODES USED IN DETERMINING THE STATUS (IN OR OUT) OF THE NOOE. 

HI IP THE NOOE IS IN, IT IS JUST THE LIST OF ALL NODES MENTIONED IN THE SUPPORTING 
;;; JUSTIFICATION OF THE NODE. IF THE NOOE IS OUT, IT CONTAINS ONE NOOE FROM EACH OF THE 
;;; JUSTIFICATIONS IN THE SL AND CP SETS, SUCH THAT EACH OF THESE NODES IS RESPONSIBLE 
?;; FOR THE INVALIDITY OF THE CORRESPONDING JUSTIFICATION. 

;;; TMS-CONSEQUENCES 

;;; THIS IS A LIST OF ALL NODES WHICH MENTION THE PARTICULAR NOOE IN ONE OR MORE 
;}; OF THEIR JUSTIFICATIONS. 

m TMS-EXTERNAL-NAME 

55 ; THIS IS THE THING IN THE EXTERNAL SYSTEM TO WHICH THE NOOE IS CONNECTEO. ALL 
555 SIGNALLING FUNCTIONS, WHICH SIGNAL THE EXTERNAL SYSTEM OF CHANGES OF STATUS, 

;;; USE THIS EXTERNAL NAME AS THEIR ARGUMENTS. THAT IS, THE EXTERNAL SYSTEM IS 
;;; NOTIFIED IN TERMS OF ITS OWN DATA STRUCTURES, AND NOT IN TERMS OF THE INTERNAL 
;;; TMS NOOES. 

;;; TMS-NODE-MARK 

;;; THIS IS A BIT USEO TO IMPROVE THE EFFICIENCY OF THE ALGORITHMS USED TO MANIPULATE 
5 ;; SETS OF NODES. 

;;; TMS-EXPLAIN-MARK 

$;; THIS IS A BIT USEO TO IMPROVE THE EFFICIENCY OF THE EXPLANATION ALGORITHMS. IT 
;;; SERVES BASICALLY THE SAME FUNCTION AS TMS-NODE-MARK, BUT IS A DIFFERENT BIT SO 
;;; THAT EXPLANATIONS PROOUCEO OURING BREAKPOINTS, ETC. WILL NOT SCREW UP ONGOING 
;H SET COMPUTATIONS. 
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001 ~ 1 —‘— — '— -—-—- 

002 id THE FOLLOWING ATTRIBUTES OF NOOES ARE KEPT ON THE PROPERTY LISTS OF NOOESi 
003 

004 ;;; THS-SICNHL-RECALLING-FUNCTION 

005 ;;; THIS OPTION HAY BE ATTACHEO TO ANY NODE AS A FUNCTION TO BE CALLEO WITH THE 

006 ;;; EXTERNAL NAME OF THE NODE AS ARGUMENT UHENEVER THE NODE CHANGES STATUS FROH 

007 ;;; OUT TO IN. 

008 ;;; IT IS IGNORED IF IT IS THE SYMBOL ’IGNORE. 

009 

010 ;;; THS-SIGNAL-FORGETTING-FUNCTION 

Oil ;;; THIS OPTION MAY BE ATTACHEO TO ANY NODE AS A FUNCTION TO BE CALLED WITH THE 

012 ;; 5 EXTERNAL NAME OF THE NOOE AS ARGUMENT UHENEVER THE NODE CHANGES STATUS FROH 

013 ;;; IN TO OUT. 

*014 ;;; IT IS IGNOREO IF IT IS THE SYMBOL ’IGNORE. 

015 

016 ;;; THS-CP-JUSTIFICRTIONS 

017 ;;; AS DESCRIBED ABOVE. MOST NOOES WON’T HAVE ONE, SO IT ISN’T IN THE BASIC NOOE STRUCTURE. 

018 

019 ;;; TMS-CP-CONSEQUENT-LIST 

020 i i j THIS IS A LIST ATTACHEO TO A NOOE IF THE NOOE IS THE "CONSEQUENT 1 ' OF ANY CONDITIONAL 
021 n; PROOF JUSTIFICATIONS. IF SUCH JUSTIFICATIONS EXIST, THE NOOES THEY JUSTIFY ARE PUT 

022 Hi ON THIS LIST. THIS IS TO DETERMINE THAT FINOINDEPS SHOULO BE DONE TO PRODUCE NEW 

023 ;;; SUPPORT-LIST JUSTIFICATIONS FROH CONDITIONAL PROOF JUSTIFICATIONS WHEN THE CONSEQUENTS 

024 ;;; OF THE CONDITIONAL PROOFS COME IN. 

025 

026 ;;; THS-CONTRAOICTION-NAME 

027 }}| THIS IS ATTACHEO TO A NOOE UHICH IS A CONTRADICTION. IT IS SOME ARBITRARY 

028 ;;; OBJECT THE EXTERNAL SYSTEM HAS CALLEO THE NAME OF THE CONTRADICTION. 

029 

030 j;; TMS-CONTRADICTION-TYPE 

031 |;; THIS IS ATTACHED TO A NOOE UHICH IS A CONTRADICTION. IT IS SOME ARBITRARY 

032 OBJECT THE EXTERNAL SYSTEM HAS CALLEO THE TYPE OF THE CONTRADICTION. 

033 

034 },; TMS-CONTRADICTION-HARK 

035 n; THIS IS A MARK USED TO DISTINGUISH NODES OECLAREO TO BE CONTRADICTIONS FROH 
036 ;;; NORMAL NOOES. 

037 

038 55 ; TMS-CONTRADICTION-FUNCTION 

039 jjj THIS IS AN OPTIONAL ATTACHMENT TO A CONTRADICTION NOOE UHICH CAN POINT TO 

040 A FUNCTION TO CALL WITH THE EXTERNAL NAME OF THE CONTRADICTION AS ARGUMENT 

041 j j j UHENEVER THE CONTRADICTION NOOE COMES IN AND NO ASSUMPTIONS CAN BE FOUND 

042 j; i "HONG ITS SUPPORTERS - THAT IS, A CONTRADICTION UHICH CAN’T BE REMOVED. 

843 

044 ;;; TMS-CONTRAOICTION-NOGOODS 

045 ;;; THIS IS A PIECE OF DEBUGGING INFORMATION ATTACHEO TO CONTRADICTIONS UHICH 

046 };; LISTS THE NOGOOOS THAT HAVE BEEN PROOUCED IN RESPONSE TO THE CONTRADICTION 

047 ;;s COMING IN. 

048 

049 ;;; TMS-NOGOOO-ASSUHPTIONS 

050 ;;; THIS IS A PIECE OF DEBUGGING INFORMATION ATTACHEO TO NOGOOOS UHICH LIST 

051 5 5 j THE ASSUMPTIONS FOUND BY THE BACKTRACKER FOR THE CONTRADICTION UHICH 

052 ; |; PRODUCED THE NOGOOD. 

053 

054 555 TMS-NOGOOD-CONTRADICTION 

055 ;;; THIS PIECE OF DEBUGGING INFORMATION ATTACHES THE CONTRADICTION THAT PRODUCED 

056 j j j A NOGOOO TO THAT NOGOOO. 
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555 CURRENT STORAGE ORGANIZATION OF THE SPECIAL OATA STRUCTURE* 

;;; TMS NOOES ARE HUNKS, ORGANIZED AS FOLLOUS: 

;;; THE TUO BITS FIELOS ARE USED TO STORE THE VARIOUS SMALL MARKERS AS 
55; PRRTS OF FIXNUMS. THERE ARE TUO SUCH FIELOS SO THAT THE FIXNUMS 
55; INVOLVED UILL BE SMALL ENOUGH TO NOT REQUIRE NUMBER-CONS ING. 

55 ; M ADDITIONAL NOTE* AS UILL BE DESCRIBED LATER, NOGOODS ARE NOT NOOES, 

55 5 BUT ARE SYMBOLS UITH NOOES ATTACHEO. 

5 5 5 SLOT USE 

555 ® PROPERTY LIST 

55; i TMS-EXTERNAL-NAME 

555 2 TMS-SL-JUSTIFICATIONS 

55; 3 TMS-SUPPORTING-JUSTIFICATION 

555 4 TMS-SUPPORTING-NOOES 

;}j 5 TMS-CONSEQUENCES 

5556 THS-BITS 1 

55; TMS-NOOE-MARK 

}} 5 TMS-TMP-MARK 

5 55 TMS-NOTED-MARK 

555 TMS-FINDINDEP-MARK 

555 TMS-SUBORDINRTES-MARK 

555 THS-EXPLAIN-MARK 

555 7 TMS-BITS 2 

555 TMS-SUPPORT-STATUS (2 BITS) 

555 TMS-SUPERIORS-MARK <2 BITS) 

555 THIS MACRO IS USEO TO ALTER COMPONENTS OF DATA STRUCTURES. 

555 THE FORMAT IS (MAKE (COMPONENT OBJECT) VALUE). 

(DEFMAC MAKE (X Y) 

(CONS (IMPLODE (APPEND ’(T MS-MAKE-) (CODOOR (EXPLOOEC (CAR X))))) 
(APPEND (COR X) (LIST Y)))) 

555 THIS MACRO PRODUCES ACCESSING FUNCTIONS FOR HUNK STRUCTURES. 

(DEFMAC HUNKFN (NAME SLOT) 

(LET ((CN (IMPLODE (APPEND ’ (T M S - H A K E -) (COODOR (EXPLOOEC NAME)))))) 
"(PROGN 'COMPILE 

(DEFUN ,NRME (NOOE) 

(CXR ,SLOT NODE)) 

(DEFUN ,CN (NODE NEU) 

(RPLACX ,SLOT NODE NEU))))) 


(HUNKFN TMS-EXTERNAL-NAME 1 ) 

(HUNKFN TMS-SL-JUSTIFICATIONS 2 ) 
(HUNKFN TMS-SUPPORTING-JUSTIFICATION 3 ) 
(HUNKFN TMS-SUPPORTING-NOOES 4) 

(HUNKFN TMS-CONSEQUENCES 5 ) 

(HUNKFN TMS-BITS 1 6) 

(HUNKFN TMS-BITS 2 7 ) 
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THESE FUNCTIONS DEFINE THE VARIOUS BIT STRUCTURES USEO IN NODES. 

;;; THIS flRCRO PRODUCES ACCESSING FUNCTIONS FOR BIT STRUCTURES. 

(DEFMAC BITFN (NAME POS) 

(LET (<CN (IMPLODE (APPEND ’(T MS-MAKE -) (CDODDR (EXPLODEC NAME)))))) 

"(PROGN ’COMPILE 

(DEFUN ,NRME (NODE) 

(BTON (TMS-BITSi NODE) ,POS)) 

(OEFUN ,CN (NODE NEU) 

(COND (NEU (MAKE (TMS-BITSI NODE) 

(BOR (TMS-BITSI NODE) .POS))) 

(T (MAKE (TMS-BITSI NODE) 

(BCLR (TMS-BITSI NOOE) ,POS)))))))) 

(BITFN TMS-NODE-MARK 1.) 

(BITFN TMS-TMP-HARK 2.) 

(BITFN TMS-NOTED-MARK 4.) 

(BITFN TMS-FINDINDEP-MARK 8.) 

(BITFN TMS-SUBORDINATES-MARK 16.) 

(BITFN TMS-EXPLAIN-MARK 32.) 

;;j THESE DEFINE THE REMAINING MULTI-BIT FIELOS. 

(DEFUN TMS-SUPPORT-STATUS (NODE) 

(LET ((V (BAND (TMS-BITS2 NOOE) 3.))) 

(COND ((* V 1.) ’OUT) 

((« V 2.) ’IN)))) 

(DEFUN THS-MAKE-SUPPORT-STATUS (NODE NEU) 

(COND ((EQUAL NEU ’IN) (MAKE (THS-BITS2 NODE) (BOR (BCLR (TMS-BITS2 NODE) 3.) 2.))) 
((EQUAL NEU ’OUT) (MAKE (TMS-BITS2 NODE) (BOR (BCLR (TnS-8ITS2 NOOE) 3.) 1.))) 
(T (HAKE (THS-BITS2 NOOE) (BCLR (TMS-BITS2 NODE) 3.))))) 

(DEFUN TMS-SUPERIORS-MARK (NOOE) 

(LET ((V (BAND (THS-BITS2 NODE) 12.))) 

(COND (U V 4.) ’NO) 

((■ V 8.) ’YES)))) 

(OEFUN TMS-MRKE-SUPERIORS-HRRK (NOOE NEU) 

(COND ((EQUAL NEU ’YES) (MAKE (TMS-BITS2 NODE) (BOR (BCLR (THS-BITS2 NOOE) 12.) 8.))) 
((EQUAL NEU ’NO) (MAKE (TMS-BITS2 NOOE) (BOR (BCLR (TNS-BITS2 NOOE) 12.) 4 .))) 
(T (HAKE (THS-BITS2 NOOE) (BCLR (TMS-BITS2 NODE) 12.))))) 
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;;; THIS MACRO IS USED TO DEFINE ACCESSING FUNCTIONS FOR PROPERTY-LIST STRUCTURES, 
(DEFMAC ACCESSFN (SLOTN PROPN) 

(LET ((CNAME (IMPLODE (APPENO * (T MS-MAICE -) (COOOOR (EXPLOOEC SLOTN))))) 
(PN (OR PROPN SLOTN))) 

"(PROGN 'COMPILE 

(DEFUN ,SLOTN (NODE) (GET NODE ’,PN)) 

(DEFUN ,CNAME (NODE NEU) 

(COND (NEU (PUTPROP NODE NEU ’,PN)) 

(T (REMPROP NODE ',PN))))))) 

(ACCESSFN TMS-SIGNAL-RECALLING-FUNCTION) 

(ACCESSFN TMS-SIGNAL-FORGETTING-FUNCTION) 

(ACCESSFN TMS-CP-JUSTIFICATIONS) 

(ACCESSFN TMS-CP-CONSEQUENT-L1ST) 

(ACCESSFN TMS-CONTRADICTION-NAME) 

(ACCESSFN THS-CONTRADICTION-TYPE) 

(ACCESSFN TMS-CONTRAOICTION-MARK) 

(ACCESSFN TMS-CONTRADICTION-FUNCTION) 

(ACCESSFN TMS-CONTRADICTION-NOGOODS) 

(ACCESSFN TMS-NOGOOD-ASSUMPTIONS) 

(ACCESSFN TMS-NOGOOD-CONTRADICTION) 

;;» THESE functions install SIGNALLING FUNCTIONS and them call them IF REQUIRED. 

(DEFUN TMS-INSTALL-SIGNAL-FORGETTING-FUNCTION (NODE FUN) 

(HAKE (TMS-SIGNAL-FORGETTING-FUNCTION NODE) FUN) 

(AND FUN (THS-IS-OUT NODE) (FUNCALL FUN (THS-EXTERNAL-NAHE NODE)))) 

(DEFUN TMS-INSTALL-S IGNAL-RECALL ING-FUNCTION (NODE FUN) 

(MAKE (TMS-SIGNAL-RECALLING-FUNCTION NOOE) FUN) 

(AND FUN (THS-IS-IN NODE) (FUNCALL FUN (THS-EXTERNAL-NAHE NODE)))) 

;;; THIS FUNCTION GENERATES A VIRGIN NODE UITH A GIVEN EXTERNAL NAME. 

;;; SINCE IT HAS NO JUSTIFICATIONS, IT IS OUT. 

(DEFUN TMS-MAKE-NODE (NAME) 

(LET ((NODE (MAKHUNK 8.))) 

(HAKE (TMS-SUPPORT-STATUS NODE) 'OUT) 

(MAKE (THS-EXTERNAL-NAHE NODE) NAME) 

NODE)) 
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;;; THE FOLLOWING DEFINE THE STRUCTURE OF JUSTIFICATIONS. 

;;; JUSTIFICATIONS ARE ALWAYS PAIRS: THE FIRST PART OF WHICH IS THE INTERNAL 
;;; TMS DATA STRUCTURE, AND THE SECOND PART OF WHICH IS THE EXTERNAL REPRESENTATION 
;;; OF THE JUSTIFICATION. 

;;; THE DIFFERENT TYPES OF WAYS A SUPPORTING NODE CAN AFFECT A JUSTIFICATION ARE 
;;; EXPLICIT IN THE STRUCTURE OF THE JUSTIFICATION. THUS WITHIN ANY SUBLIST 
;;; (THE TMS-SL-JUSTIFICATION-INLIST, FOR EXAMPLE), THE OROER OF THE NODES 
;;; LISTED CANNOT MATTER. 

;;; GENERAL PAIR STRUCTURE: 

(DEFUN TMS-JUSTIFICATION-ARGUMENT (JUST) (COR JUST)) 

(DEFUN TMS-JUSTIFICATION (JUST) (CAR JUST)) 

;;; SUPPORT-LIST (SL) JUSTIFICATION STRUCTURE: 

(DEFUN TMS-SL-JUSTIFICATION-INLIST (JUST) (CAR (TMS-JUSTIFICATION JUST))) 

(DEFUN TMS-SL-JUSTIFICATION-OUTLIST (JUST) (CDR (TMS-JUSTIFICATION JUST))) 

(DEFUN TMS-MAKE-SL-JUSTIFICATION (INLIST OUTLIST EXTARG) (CONS (CONS INLIST OUTLIST) EXTARO) 

;;; CONDITIONAL-PROOF (CP) JUSTIFICATION STRUCTURE: 

(DEFUN TMS-CP-JUSTIFICATION-CONSEQUENT (JUST) (CAR (TMS-JUSTIFICATION JUST))) 

(DEFUN TMS-CP-JUSTIFICAT ION-IN-HYPOTHESES (JUST) (CADR (TMS-JUSTIFICATION JUST))) 

(DEFUN TMS-CP-JUSTIFICATION-OUT-HYPOTHESES (JUST) (COOR (TMS-JUSTIFICATION JUST))) 

(DEFUN TMS-MAKE-CP-JUSTIFICATION (CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTARG) 

(CONS (CONS CONSEQUENT (CONS INHYPOTHESES OUTHYPOTHESES)) EXTARG)) 


h; THESE FUNCTIONS PREVENT RECORDING DUPLICATE JUSTIFICATIONS FOR NODES, 
rn nY THEORY OF THIS IS TRADITIONALLY FUZZY. IN A SYSTEM LIKE THE CURRENT 
;;; ONE IN WHICH THERE ARE EXTERNAL FORMS FOR JUSTIFICATIONS, IT SEEMS LIKE 
;;; JUSTIFICATIONS UITH DISTINCT EXTERNAL FORMS SHOULD BE MAINTAINED SEPARATELY, 
;;; SINCE THE RETRACTION OF ONE EXTERNAL FORM MIGHT NOT MEAN THE RETRACTION OF 
;;; ALL INTERNALLY-IDENTICAL JUSTIFICATIONS. IN A SINGLE-PURPOSE, INTEGRATED 
;;; SYSTEM SOME BETTER STRATEGY MIGHT BE POSSIBLE. 

(DEFUN TMS-SL-JUSTIFICATION-MEMBER (JUST JUSTS) 

(DO ((JS JUSTS (CDR JS))) 

((NULL JS)) 

(AND (EQUAL (TMS-JUSTIFICATION-ARGUMENT JUST) 

(TMS-JUSTIFICATION-ARGUMENT (CAR JS))) 

(TMS-EQUAL-LIST (TMS-SL-JUSTIFICATION-INLIST JUST) 

(TMS-SL-JUSTIFICATION-INLIST (CAR JS))) 
(TMS-EQUAL-LIST (TMS-SL-JUSTIFICATION-OUTLIST JUST) 

(TMS-SL-JUSTIFICATION-OUTLIST (CAR JS))) 

(RETURN T)))) 

.. .CP 

(OEFUN TMS-CP-JUSTIFICATION-MEMBER (JUST JUSTS) 

(DO ((JS JUSTS (CDR JS))) 

((NULL JS)) 

(AND (EQ (TMS-CP-JUSTIFICATION-CONSEQUENT JUST) 

(TMS-CP-JUSTIFICATION-CONSEQUENT (CAR JS))) 

(EQUAL (TMS-JUSTIFICATION-ARGUMENT JUST) 

(TMS-JUSTIFICATION-ARGUMENT (CAR JS))) 

(TMS-EQUAL-LIST (TMS-CP-JUSTIFICAT I ON-IN-HYPOTHESES JUST) 

(TMS-CP-JUSTIFICATION-IN-HYPOTHESES (CAR JS))) 
(TMS-EQUAL-LIST (TMS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST) 

(TMS-CP-JUSTIFICATION-OUT-HYPOTHESES (CAR JS))) 

(RETURN T)))) 

55 ; THIS IS EQUAL SPECIALIZED FOR LISTS TREATING HUNKS AS ATOMS. 

(DEFUN TMS-EQUAL-LIST (X Y) 

(PROG () 

LP (CONO ((NULL X) (RETURN (NULL Y))) 

((NULL Y) (RETURN NIL)) 

((EQ (CAR X) (CAR Y)) 

(SETQ X (COR X)) 

(SETQ Y (CDR Y)) 

(GO LP)) 

(T (RETURN NIL))))) 
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THESE DEFINE THE FORHRT OF INTERNRLLY GENERATED FACTS (LIKE NOGOODS, ETC.) 

;;; DUE TO THE FACT THAT CONTRADICTIONS HAY CORE IN SEVERAL TIMES, THE TfIS 
; ; ; MUST BE ABLE TO GENERATE INTERNAL NOOES FOR NOGOODS. SINCE THESE UILL OCCUR 
;;; IN EXPLANATIONS IN THE EXTERNAL SYSTEM, EITHER THE IMPLEMENTATION DETAILS 
5 5; OF TMS NODES (AS HUNKS OR PLISTS, ETC.) MUST BE MADE AVAILABLE TO THE EXTERNAL 
;;; USER, OR ELSE A SIMPLE EXTERNAL STRUCTURE CAN BE GENERATEO FOR THESE NODES. 

;;; I HAVE TAKEN THE LATTER APPROACH. NOGOODS ARE SYMBOLS (CALLEO INTERNAL FACTS). 
;;; THEY HAVE A SYMBOLIC ASSERTION-LIKE STATEMENT ATTACHED TO THEM, OENOTING THE 
;;; REASONS FOR THEIR CREATION, AS HELL AS A TMS NOOE ATTACHEO. 

;;$ THIS FUNCTION CHECKS WHETHER AN ATOM IS AN INTERNAL TMS FACT. 

(ACCESSFN TMS-FACTP) 

;;; THIS FUNCTION GETS THE STATEMENT OF AN INTERNAL TMS FACT. 

(ACCESSFN TMS-FACT-STATEMENT) 

;;; THIS FUNCTION GETS THE TMS NOOE OF AN INTERNAL TMS FACT. 

(ACCESSFN TMS-FACT-NODE) 

5; 5 TMS-MAKE-FACT GENERATES A NEW INTERNAL FACT OF A GIVEN TYPE 
;$$ (WHICH IS SPLICED INTO THE NAME OF THE FACT) AND A STATEMENT. 

(DEFUN TMS-MAKE-FACT (TYPE STATEMENT) 

(LET ((FACT (TMS-GENS TYPE))) 

(MAKE (TMS-FACTP FACT) T) 

(MAKE (TMS-FACT-NOOE FACT) (TMS-MAKE-NODE FACT)) 

(MAKE (TMS-FACT-STATEMENT FACT) STATEMENT) 

(MAKE (TMS-SIGNAL-RECALLING-FUNCTION FACT) * IGNORE) 

(MAKE (TMS-SIGNAL-FORGETTING-FUNCTION FACT) 9 IGNORE) 

FACT)) 
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(COMMENT TRUTH MAINTENANCE SUPPORT FUNCTIONS) 

;;; THE ANTECEDENTS OF A NODE IS THE SET OF OTHER NOOES IN ITS IMMEDIATE WELL-FOUNDED 
;;; SUPPORT. OUT NOOES HAVE NO WELL-FOUNDED SUPPORT, AND SO NO ANTECEDENTS. 

(DEFUN TMS-ANTECEDENTS (NODE) (AND (THS-IS-IN NOOE) (THS-SUPPORTING-NOOES NODE))) 

5 55 THS-IS-IN AND TMS-IS-OUT TEST SINGLE NODES FOR INNESS OR OUTNESS. 

(DEFUN THS-IS-IN (NODE) (EQ (TMS-SUPPORT-STATUS NOOE) ’IN)) 

(DEFUN TMS-IS-OUT (NODE) (EQ (TMS-SUPPORT-STATUS NODE) ’OUT)) 

;;; TMS-ARE-IN AND THS-ARE-OUT TEST LISTS OF NODES TO SEE IF ALL ARE IN OR OUT. 

(DEFUN TMS-ARE-IN (NODES) 

(DO ((NL NOOES (CDR NL))) 

((NULL NL) T) 

(OR (THS-IS-IN (CAR NL)) (RETURN NIL)))) 

(DEFUN TMS-ARE-OUT (NODES) 

(DO ((NL NODES (CDR NL))) 

((NULL NL) T) 

(OR (TMS-IS-OUT (CAR NL)) (RETURN NIL)))) 

55 5 THIS FUNCTION RETURNS A LIST OF ALL JUSTIFICATIONS POSSESSED BY A NOOE. 

(DEFUN TMS-JUSTIFICATIONS (NODE) 

(APPEND (TMS-SL-JUSTIFICATIONS NODE) (TMS-CP-JUSTIFICATIONS NOOE) NIL)) 

;;; THIS FUNCTION ADDS A NODE TO THE LIST OF CONSEQUENCES OF A NOOE 
55 ; IF IT WASN’T THERE ALREADY. 

(DEFUN TMS-ADO-CONSEQUENCE (NODE CONSEQUENCE) 

(OR (MEMO CONSEQUENCE (TMS-CONSEQUENCES NODE)) 

(MAKE (TMS-CONSEQUENCES NODE) 

(CONS CONSEQUENCE (TMS-CONSEQUENCES NODE))))) 

;;; TMS-AFFECTEO-CONSEQUENCES RETURNS A LIST OF JUST THOSE CONSEQUENCES 

555 OF A NOOE WHICH ACTUALLY MENTION THE NODE IN THEIR CURRENT SUPPORTING-NODES. 

;;; THIS IS ALL THE NODES WHICH ACTUALLY DEPEND ON THE GIVEN NODE DIRECTLY. 

(DEFUN THS-AFFECTED-CONSEQUENCES (NOOE) 

(DO ((CL (TMS-CONSEQUENCES NODE) (CDR CL)) 

(ANS NIL)) 

((NULL CL) ANS) 

(AND (MEMQ NODE (THS-SUPPORTING-NOOES (CAR CL))) 

(PUSH (CAR CL) ANS)))) 

555 TMS-AFFECTS-NODES IS BASICALLY THE PREDICATE (NOT (NULL (THS-AFFECTED-CONSEQUENCES X))>. 
555 SINCE IT JUST TESTS FOR THE EXISTENCE OF AFFECTED CONSEQUENCES, IT DOESN’T HAVE TO CONS. 

(DEFUN TMS-AFFECTS-NODES (NODE) 

(DO ((CL (TMS-CONSEQUENCES NODE) (CDR CL))) 

((NULL CL) NIL) 

(AND (MEMQ NODE (THS-SUPPORTING-NOOES (CAR CL))) (RETURN T)))) 

;;; TMS-BELIEVEO-CONSEQUENCES RETURNS A LIST OF ALL IN NOOES AHONG THE AFFECTEO CONSEQUENCES 
555 OF A NODE. 

(DEFUN TMS-BELIEVEO-CONSEQUENCES (NODE) 

(DO ((CL (TMS-CONSEQUENCES NOOE) (CDR CL)) 

(ANS NIL)) 

((NULL CL) ANS) 

(AND (MEMQ NODE (TMS-ANTECEDENTS (CAR CL))) 

(PUSH (CAR CL) ANS)))) 
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;;; THE FOLLOWING FUNCTIONS RETURN RLL NODES OF THE SPECIFIED TYPE 
;;; IN RELRTIONSHIP TO THE GIVEN NODE. 

15? THIS RETURNS RLL NODES RERCHED BY RECURSIVELY TRICING RNTECEOENTS. 

5;} THS-fIRRIC-FOUNDATIONS COLLECTS UP R NON-REPETITIVE LIST, AND 
$55 TflS-FOUNDRTIONS UNMRRXS AND RETURNS THE LIST. 

(DEFUN TMS-FOUNORTIONS (NOOE) 

(LET ((NODELIST (MRPCRN 9 TMS-MARX-FOUNDATIONS (TfIS-RNTECEOENTS NODE)))) 

(MRPC * (LAMBDA (N) (MAKE (TMS-EXPLAIN-HARK N) NIL)) 

NODELIST))) 

(DEFUN TMS-MARX-FOUNDATIONS (NOOE) 

(COND ((NULL (TMS-EXPLAIN-MARX NODE)) 

(MAXE (THS-EXPLRIN-MARX NODE) T) 

(CONS NODE (MRPCRN •TMS-MARX-FOUNDATIONS (TMS-RNTECEDENTS NODE)))))) 

;;; TH is returns rll nodes reached by recursively taxing believeo consequences. 

15$ TMS-MRRX-REPERCUSSIONS COLLECTS UP fl NON-REPETITIVE LIST, AND 
III TMS-ALL-REPERCUSSIONS UNMARXS AND RETURNS THE LIST. 

(DEFUN TMS-REPERCUSSIONS (NODE) 

(LET ((NODELIST (MRPCRN ’TMS-MRRX-REPERCUSSIONS (THS-BELIEVEO-CONSEQUENCES NOOE)))) 
(MRPC 9 (LAMBDA (N) (HAXE (TMS-EXPLAIN-MARX N) NIL)) 

NODELIST))) 

(DEFUN TMS-MRRX-REPERCUSSIONS (NODE) 

(COND ((NULL (TMS-EXPLAIN-MARX NODE)) 

(MAXE (TMS-EXPLAIN-HARX NODE) T) 

(CONS NODE (MRPCRN * TMS-MRRX-REPERCUSSIONS (TNS-BEL IEVEO-CONSEQUENCES NODE)))))) 

;;; TMS-PREMISES AND ITS SUBFUNCTIONS COLLECT UP A LIST OF ALL PREMISES IN 
5 51 THE RECURSIVE WELL-FOUNDED SUPPORT OF A NOOE. PREMISES ARE NODES UHICH 
III ARE IN BUT DEPEND ON NO NOOES (THAT IS, HAVE NO ANTECEDENTS.) 

(DEFUN TMS-PREMISES (NODE) 

(LET ((PL (TMS-PREMISES1 NODE))) 

(TMS-PREMISES2 NOOE) 

PL)) 

(DEFUN TMS-PREMISES1 (NODE) 

(COND ((NOT (TMS-EXPLAIN-MARX NODE)) 

(MAXE (TMS-EXPLAIN-MARX NODE) T) 

(COND ((TMS-ANTECEDENTS NODE) (MRPCRN ’TMS-PREMISES1 (TMS-RNTECEDENTS NODE))) 

(T (AND (THS-IS-IN NODE) (LIST NODE))))))) 

(DEFUN TMS-PREMISES2 (NODE) 

(COND ((TMS-EXPLAIN-MARX NODE) 

(MAXE (TMS-EXPLAIN-MARX NOOE) NIL) 

(MRPC ’TMS-PREMISES2 (TMS-ANTECEDENTS NODE))))) 

555 TMS-ASSUMPTIONS AND ITS SUBFUNCTIONS COLLECT UP ALL ASSUMPTIONS INVOLVED 
5 5 5 IN THE WELL-FOUNDED SUPPORT OF A NODE. ASSUMPTIONS ARE NODES UHICH ARE IN ANO DEPENO 
;;; UPON OTHER NODES UHICH ARE OUT, THAT IS, DEPEND UPON INCOMPLETE INFORMATION. 

(OEFUN TMS-ASSUMPTIONS (NODE) 

(LET ((RL (TMS-ASSUMPTIONS1 NODE))) 

(TMS-ASSUMPTI0NS2 NOOE) 

AL)) 

(DEFUN TMS-ASSUMPTIONS1 (NOOE) 

(COND ((NOT (TMS-EXPLAIN-MARX NOOE)) 

(MAXE (TMS-EXPLAIN-MARX NODE) T) 

(PROG (FLAG ANS) 

(MAPCAN 9 (LAMBDA (A) 

(COND ((TMS-IS-OUT A) (SETQ FLAG T)> 

(T (SETQ ANS (NCONC (TMS-ASSUMPTIONS1 A) ANS))))) 
(TMS-ANTECEDENTS NOOE)) 

(RETURN (COND (FLAG (CONS NOOE ANS)) 

(T ANS))))))) 


(DEFUN TMS-RSSUMPTI0NS2 (NOOE) 

(CONO ((TMS-EXPLAIN-MARX NOOE) 

(MAXE (TMS-EXPLAIN-MARX NOOE) NIL) 

(MAPC 9 TMS-ASSUMPTI0NS2 (TMS-ANTECEDENTS NODE))))) 
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;;; THIS KLUDGE TRKES R LIST OF NODES RNO CLOBBERS IT TO BE R NON-REPET ITIVE LIST 
;;; OF THE SRHE NODES. THE SPECIRL CRSE OF TUO OR FEUER NOOES IN THE LIST IS HRNDLEO 
55 ; SPECIALLY FOR SPEED. 

(DEFUN TfIS-NODE-SET-CONDENSE (L) 

(CONO ((NULL L) NIL) 

((CODR L) 

(PROG (PTR NEXT) 

(SETQ PTR L) 

(SETQ NEXT (COR L)) 

(HAKE (TNS-NODE-HARK (CAR PTR)) T) 

LP (CONO ((NULL NEXT) 

(HflPC * (LAMBDA (E) (HAKE (TtlS-NODE-flARK E) NIL)) L) 
(RETURN L)) 

((THS-NODE-NRRK (CAR NEXT)) 

(LET ((A (COR NEXT))) 

(RPLACO PTR A) 

(SETQ NEXT A)) 

(GO LP)) 

(T (SETQ PTR NEXT) 

(SETQ NEXT (COR NEXT)) 

(MAKE (TMS-NOOE-NARK (CAR PTR)) T) 

(GO LP))))) 

((EQ (CAR L) (CADR L)> (COR L)) 

(T L))) 

;;; THIS FUNCTION PRINTS A HESSAGE AND NODE FOR UALLPAPER 8 DEBUGGING PURPOSES. 

(OEFUN TfIS-PRINT (TEXT NODE) 

(TERPRI) (PRINC TEXT) (PRINC ’| |) (PRIN1 (TtlS-EXTERNAL-NAHE NODE))) 
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;;; TMS-SL-JUSTIFY CAN BE USED TO SUPPLY A NEU JUSTIFICATION FOR 
;;; A NODE, AND TO THEN DETERMINE ITS SUPPORT STATUS. IF THE NOOE 
;;; LACKS HELL FOUNDED SUPPORT, TRUTH MAINTENANCE OCCURS. 

;;; THERE IS AN EXTRA LAYER OF HAIR INVOLVED IN ALL THE MAJOR EXTERNAL FUNCTIONS. 

;;; THE BASIC PROBLEM IS THAT SUPERFLUOUS STATUS CHANGE SIGNALLING SHOULD BE 

;;; AVOIDED. SINCE ONE INVOCATION OF TRUTH MAINTENANCE CAN TRIGGER OTHER INVOCATIONS. 

DUE TO CONTRADICTIONS AND CONDITIONAL PROOFS, THIS MEANS THAT ALL STATUS CHANGE 
;;; SIGNALLING SHOULD BE DELAYED UNTIL THE ACTUAL RETURN TO THE EXTERNAL SYSTEM. 

;;; THIS REQUIRES THAT THERE BE INTERNAL VERSIONS OF THE FUNCTIONS FOR JUSTIFYING NOOES. 
;;; INVOKING BACKTRACKING, ETC. THE EXTERNAL VERSIONS ALL CONSIST OF A RATHER 
;;; STANDARO BLOCK OF CODE WRAPPED AROUND THE CALL TO THE INTERNAL VERSION. 

;;; TMS-SL-JUSTIFY RETURNS NIL IF NO CHANGE IN STATUS OCCURRED, T OTHERWISE. 

(OEFUN TMS-SL-JUSTIFY (NODE INS OUTS EXTARG) 

(LET (UTHS-NOTEO-IN-NOOES* NIL) 

UTHS-NOTED-OUT-NODES* NIL) 

(OLDSTATUS (TMS-SUPPORT-STATUS NOOE))) 

(TMS-SL-JUSTIFY1 NOOE INS OUTS EXTARG) 

(TMS-TMP-SCAN) 

(TMS-SIGNAL-CHANGES) 

(NOT (EQ OLOSTATUS (TMS-SUPPORT-STATUS NOOE))))) 


;;j TMS-SL-JUSTIFY1 RETURNS T IF THE JUSTIFICATION CAUSES TRUTH MAINTENANCE, NIL OTHERWISE. 

(OEFUN TMS-SL-JUSTIFY1 (NOOE INS OUTS EXTARG) 

(LET ((JUST (TMS-MAKE-SL-JUSTIFICATION INS OUTS EXTARG))) 

(COND ((LET ((JS (THS-SL-JUSTIFICATIONS NODE))) 

(COND ((NOT (TMS-SL-JUSTIFICATION-MEMBER JUST JS)) 

(MAKE (TMS-SL-JUST IFI CAT IONS NOOE) (NCONC JS (LIST JUST))) 
T>)) 

(MAPC 9 (LAMBDA (N) (TMS-ADO-CONSEQUENCE N NOOE)) INS) 

(MAPC 9 (LAMBDA (N) (THS-AOO-CONSEQUENCE N NOOE)) OUTS) 

(AND *TMS-SEE-JUSTIFICATIONS-SW* (TMS-PRINT 9 1JUSTIFYING! NODE)) 

(EQCASE (TMS-SUPPORT-STATUS NOOE) 

(IN NIL) 

(OUT (EQCASE (THS-UF-EVAL-SL-JUSTIFICATION JUST) 

(YES (TMS-TMP (LIST NODE)) T) 

(NO (THS-1NSTALL-WF-SUPPORT NOOE) NIL)))))))) 
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.. .rp 

9 9 9 

$;; TfIS-CP-JUSTIFY CRN BE USED TO PROVIOE R CONDITIONAL-PROOF JUSTIFICATION 
;;; FOR R NODE. THE CONDITIONAL PROOF IS OF THE FORK "THE SUPPORT 
5 5; OF CONSEQUENT RELATIVE TO THE HYPOTHESES." IT IS EQUIVALENT TO A SUPPORT 
;;; LIST JUSTIFICATION CONTAINING THE OTHER NODES SUPPORTING SUCH A PROOF. 

>>; THS-CP-JUSTIFY RETURNS NIL IF NO CHANGE IN STATUS OCCURRED, T OTHERWISE. 

(DEFUN TfIS-CP-JUSTIFY (NODE CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTARG) 

(LET ((#Tf1S-NOTED-IN-NODES* NIL) 

(*Tf1S-NOTED-OUT-NOOES* NIL) 

(OLDSTATUS (TflS-SUPPORT-STATUS NODE))) 

(TfIS-CP-JUSTIFYi NODE CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTARG) 

(TnS-THP-SCRN) 

(TtlS-S IGNRL-CHANGES) 

(NOT (EQ OLDSTATUS (TflS-SUPPORT-STATUS NODE))))) 

(DEFUN TfIS-CP-JUSTIFYl (NODE CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTARG) 

(LET ((JUST (TfIS-HAKE-CP-JUSTIFICRTION CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTARG))) 
(COND ((LET ((JS (TfIS-CP-JUSTIFICATIONS NOOE))) 

(CONO ((NOT (TflS-CP-JUSTIFICATION-flEflBER JUST JS)) 

(HAKE (TfIS-CP-JUST IF I CATIONS NODE) (NCONC JS (LIST JUST))) 

T))) 

(MAKE (TftS-CP-CONSEQUENT-L 1ST CONSEQUENT) 

(CONS NODE (TfIS-CP-CONSEQUENT-L 1ST CONSEQUENT))) 
(TflS-ADO-CONSEQUENCE CONSEQUENT NOOE) 

(flAPC ' (LAMBDA (N) (TflS-ADO-CONSEQUENCE N NODE)) INHYPOTHESES) 

(HAPC • (LflflBOA (N) (TUS-ADO-CONSEQUENCE N NODE)) OUTHYPOTHESES) 

(AND *TflS-SEE-JUST IF ICRTIONS-SU* (TflS-PRINT 9 1 JUSTIFYING I NODE)) 

(AND (EQ (THS-SUPPORT-STATUS NOOE) 'OUT) 

(EQCASE (TfIS-UF-EVAL-CP-JUSTIF ICATION JUST) 

(YES 

(LET ((SUPPORT 

(THS-FINDINDEP 

(THS-CP-JUSTIFICATION-CONSEQUENT JUST) 
(THS-CP-JUSTIFICATION-IN-HYPOTHESES JUST) 
(TflS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)))) 
(THS-SL-JUSTIFY1 NOOE (CAR SUPPORT) (COR SUPPORT) 

(TflS-JUSTIF ICATION-ARGUHENT JUST) ) )) 

(NO (THS-INSTALL-NF-SUPPORT NODE)))))))) 
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;;; TMS-RETRACT REMOVES A PREMISE JUSTIFICATION FROM A NODE. 

;;; ACTUALLY, IT IS NOT QUITE RIGHT AT PRESENT, SINCE A RETRACTION 
;;; SHOULD SPECIFY THE EXACT EXTERNAL FORM OF THE PREMISE JUSTIFICATION 
;;; TO BE RETRACTED, LEAVING OTHER PREMISE JUSTIFICATIONS UNTOUCHEO. 

;;; THIS UOULO OBVIATE THE HAIR PRESENTLY EXISTING WHICH CHECKS TO AVOID 

;;; REMOVING PREMISE JUSTIFICATIONS DERIVED FROM CONDITIONAL PROOF JUSTIFICATIONS. 

;;; PROBABLY THIS MEANS THAT TMS-RETRACT SHOULD BE GENERALI2E0 TO REMOVE 
;;; ANY TYPE OF JUSTIFICATION, GIVEN THE EXTERNAL FORM OF THE JUSTIFICATION 
;;; AS ARGUMENT. 

(DEFUN TMS-RETRACT (NOOE) 

(LET (<*TMS-NOTEO-IN-NODES* NIL) 

UTMS-NOTED-OUT-NODES* NIL) 

(OLDSTATUS (TMS-SUPPORT-STATUS NODE))) 

(TMS-RETRACT1 (LIST NODE)) 

(TMS-TMP-SCAN) 

(TMS-SIGNAL-CHANGES) 

(NOT (EQ OLDSTATUS (TMS-SUPPORT-STATUS NOOE))))) 


■: *CP 

(DEFUN TMS-RETRRCT1 (NODELIST) 

(DO ((NL NODELIST (COR NL>) 

(TL NIL)) 

((NULL NL) (RND TL (TMS-TNP TL))) 

(DO ((JS (TMS-SL-JUSTIFICRTIONS (CRR NL)) (COR JS>> 

(CJS (TNS-CP-JUSTIFICRTIONS (CAR NL)))) 

((NULL JS)) 

(LET ((JUST (CRR JS)>> 

(COND ((RND (NULL CmS-SL-JUSTIFICRTION-INLIST JUST)) 

(NULL (TNS-SL-JUSTIFICRTION-OUTL1ST JUST)) 

(NOT (DO ((CS CJS (COR CS))) 

((NULL CS)) 

(RND (EQ (TNS-JUST IFI CRT ION-RRCUNENT JUST) 

(TNS-JUSTIFICATION-ARGUMENT (CAR CS>>> 
(RETURN T>>)>> 

(AND (EQ JUST (TMS-SUPPORTING-JUSTIFICRTION (CAR NL))) 

(PUSH (CRR NL) TL)) 

(MAKE (TMS-SL-JUSTIFICRTIONS (CAR NL)) 

(DELQ JUST (TNS-SL-JUSTIFICATIONS (CAR NL)))))))))) 
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(COMMENT TRUTH MAINTENANCE PROCESSING FUNCTIONS) 

;; THE TRUTH MAINTENANCE PROCESSOR: 

;; TRUTH MAINTENANCE PROCESSING OCCURS WHEN THE SUPPORT STATUS 
;; OF A NODE IS CHANGED. THE MAINTENANCE PROCESSING IS 
;; INITIATED BY CALLING TMS-TMP WITH THE LIST OF NODES IN 
;; QUESTION. 

;; THERE ARE TWO PHASES TO THE TRUTH MAINTENANCE PROCESS. 

;; THE FIRST PHASE CONSISTS OF LOOKING FOR WELL-FOUNDED SUPPORT FOR 

;; ALL NODES INVOLVED IN TRUTH MAINTENANCE. SOME NODES MAY BE LEFT 

;; WITH THEIR STATUS STILL NOT DETERMINED AT THE END OF THIS PHASE. 

;; THE SECOND PHASE IS A RELAXATION PROCESS IN WHICH "NOT-WELL-FOUNDED" (NWF) 

;; SUPPORT IS DERIVEO FOR ALL REMAINING NODES. THIS INVOLVES CHECKING 
;; FOR SUPPORT UNDER THE ASSUMPTION THAT ALL NODES WITHOUT WELL-FOUNDED 
;; SUPPORT ARE OUT. THIS MAY BE DISCOVERED TO BE IN ERROR BY SUBSEQUENTLY 
;; DERIVING SUPPORT FOR A NODE ASSUMED TO BE OUT, CAUSING FURTHER TRUTH 
;$ MAINTENANCE UNTIL THE DATA BASE RELAXES TO A STABLE STATE. 

(DEFUN TMS-TMP (NODELIST) 

(COND (*TMS-SEE-TMP-SW* 

(TERPRI) 

(PRINC ’|TRUTH MAINTENANCE PROCESSING INITIATED!) 

(COND UTMS-SEE-TMP-INVOKER-SW* 

(COND ((NULL (CDR NODELIST)) m JUST ONE INVOKER 

(PRINC »| BY |) 

(PRINI (TMS-EXTERNAL-NAME (CAR NODELIST))))))) 

(PRINC 9 1, |))) 

(SETQ *TMS-PROCESS-QUEUE* NIL) 

(LET ((NOTEO-NODES (MAPCAN ’TMS-HARK-AFFECTED-CONSEQUENCES NODELIST))) 

(DO ((N (TMS-DEQUEUE) (TMS-DEQUEUE))) ;;; FIRST GROVEL FOR SURE STUFF 

((NULL N)) 

(AND (NULL (TMS-SUPPORT-STATUS N)) (TMS-WF-EXAMINE N))) 

(DO ((NL NOTED-NODES (CDR NL))) ;$; FIND LINGERERS 

((NULL NL)) 

(OR (TMS-SUPPORT-STATUS (CAR NL)) (THS-QUEUE (CAR NL)))) 

(DO ((N (TMS-DEQUEUE) (TMS-DEQUEUE))) ;;; THEN GROVEL DOUBTFUL STUFF 

((NULL N)) 

(AND (NULL (TMS-SUPPORT-STATUS N)) (TMS-NWF-EXAMINE N))) 

(MAPC ’(LAMBDA (N) CHECK FOR BUGS IN TMS 

(COND ((NULL (TMS-SUPPORT-STATUS N)) 

(PRINT (TMS-EXTERNAL-NAME N)) 

(BREAK | NULL TMS ERROR |)))) 

NOTED-NODES) 

(COND (*TMS-SEE-TMP-SW* 

(LET ((BASE 10.) (*NOPOINT T)) (PRINT (LENGTH NOTEO-NODES))) 

(PRINC ’INODES EXAMINED.!))))) 
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;;; THIS UGLY LOOP SCANS THE LIST OF NODES INVOLVED TO SEE IF ANY ARE NOU ACTIVE 
;;; CONTRADICTIONS, OR ARE CP CONSEQUENCES UHICH CAN BE USEO TO DERIVE NEU FINDINDEP'ED 
;;; SL JUSTIFICATIONS. IF ANY ARE FOUND, TflS PROCESSING HAY OCCUR, IN UHICH CASE 
;; : the SCAN HUST BE RESTARTED. 


; . . CP 

(DEFUN THS-THP-SCAN 0 
(PROG () 

LOOP n; SIGH... 

;;; THIS CLAUSE CHECKS FOR CONTRADICTIONS AHONG NOTED NODES. 

(AND (DO ((NL *THS-NOTEO-IN-NOOES* (COR NL))) 

((NULL NL)) 

(LET ((N (CAR NL))) 

(COND ((AND (THS-IS-IN N) ;;; THIS TEST IS NOT REDUNDANT!?! 

;$ j *THS-NOTED-IN-NODES* CONTAINS NODES 
;;; UHICH UERE IN UPON ENTRY TO THE 
;;; THS. THEY HAY NOT BE IN NOU. 
(THS-CONTRADICTION-HARK N) 

(EQ (THS-PROCESS-CONTRADICTIONi 
(THS-CONTRADICTION-NAHE N) N 
(THS-CONTRADICTION-TYPE N) NIL) 

’FOUND-A-CULPRIT)) 

(RETURN T))))) 

(GO LOOP)) 

;;; THIS CLAUSE CHECKS FOR CONTRADICTIONS AHONG NOTEO NODES. 

(AND (DO ((NL *THS-NOTED-OUT-NODES* (CDR NL))) 

((NULL NL)) 

(LET ((N (CAR NL))) 

(COND ((AND (THS-IS-IN N) 

(THS-CONTRADICTION-HARK N) 

(EQ (THS-PROCESS-CONTRADICTIONI 
(THS-CONTRADICTION-NAHE N) N 
(THS-CONTRADICTION-TYPE N) NIL) 

’FOUND-A-CULPRIT)) 

(RETURN T))))) 

(GO LOOP)) 

;;; THIS CLAUSE CHECKS FOR THE OPPORTUNITY TO HAKE NEU SUPPORT-LIST 
;;; JUSTIFICATIONS FROH NEULY INNED CONSEQUENTS OF CONDITIONAL PROOFS. 

(AND (DO ((NL *THS-NOTED-IN-NODES* (CDR NL))) 

((NULL NL)) 

(LET ((N (CAR NL))) 

(AND (THS-IS-IN N) 

(THS-CHECK-CP-CONSEQUENCES N) 

(RETURN T)))) 

(GO LOOP)) 

m THIS clause checks for THE opportunity TO HAKE NEU SUPPORT-LIST 
;;$ JUSTIFICATIONS FROH NEULY INNEO CONSEQUENTS OF CONDITIONAL PROOFS. 

(AND (DO ((NL *THS-NOTED-OUT-NODES* (CDR NL))) 

((NULL NL)) 

(LET ((N (CAR NL))) 

(AND (THS-IS-IN N) 

(THS-CHECK-CP-CONSEQUENCES N) 

(RETURN T)))) 

(GO LOOP)))) 
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;;; TRS-CHECK-CP-CONSEQUENCES REOERIVES SUPPORT FOR CONDITIONRLLY PROVEN NOOES 
;;; UHENEVER THE CONSEQUENT OF ONE OF THEIR CONDITIONRL-PROOF JUSTIFICATIONS 
;;; CORES IN. 


• • «CP 

(DEFUN TRS-CHECK-CP-CONSEQUENCES (NOOE) 

(PROG (CHRNGEO) 

(MRPC ’ (LARBDA (CPN) 

(RRPC ’ (LAMBDA (JUST) 

(COND ((AND (EQ NODE (TRS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

(TRS-WF-IN (TRS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 
(TRS-WF-OUT (TRS-CP-JUSTIFI CAT I ON-OUT-HYPOTHESES JUST))) 
(LET ((SUPPORT 

(TRS-FINDINDEP 

NODE 

(TRS-CP-JUSTIFICRTION-IN-HYPOTHESES JUST) 
(TRS-CP-JUSTIF I CRT I ON-OUT -HYPOTHESES JUST)))) 

(RNO (TfIS-SL-JUST IF Y1 CPN 

(CAR SUPPORT) 

(COR SUPPORT) 

(TRS-JUSTIFICRTION-RRGUHENT JUST)) 
(SETQ CHRNGEO T)))))) 

(TRS-CP-JUSTIFICATIONS CPN))) 

(TRS-CP-CONSEQUENT-LIST NODE)) 

CHRNGEO)) 

;;; THIS FUNCTION CHECKS THE NOOES INVOLVEO IN TRUTH RAINTENANCE TO SEE IF ANY 
;;; HAVE CHANGED IN STATUS ANO SHOULD BE SIGNALLED. 

;;; IT IS IRPORTANT THAT TflS-SIGNAL-STATUS-CHANGE DOES NOT CAUSE 
;;; FURTHER TRUTH flAINTENANCE UNTIL THE FOLLOWING LOOP IS CORPLETEO. 

(DEFUN TRS-SIGNAL-CHANGES () 

(HAPC ’(LARBOA (N) 

(TRS-SIGNAL-STATUS-CHANGE N 9 IN (TRS-SUPPORT-STATUS N)) 

(RAKE (TRS-NOTEO-RARK N) NIL)) 

♦TRS-NOTED-IN-NODES*) 

(SETQ *TRS-NOTEO-IN-NODES* NIL) 

(RAPC 9 (LARBDA (N) 

(TRS-SIGNAL-STATUS-CHANGE N 'OUT (TRS-SUPPORT-STATUS N)) 

(RAKE (TRS-NOTEO-RARK N) NIL)) 

♦TRS-NOTED-OUT-NOOES*) 

(SETQ *TRS-NOTED-OUT-NODES* NIL)) 

STIRULATE AND DESTIRULATE SHOULD BE SUPPLIED BY THE USER AS THE 
;;; DEFAULT SIGNAL-RECALLING AND SIGNAL-FORGETTING FUNCTIONS. 

;;; THE SIGNAL-RECALLING AND SIGNAL-FORGETTING FUNCTIONS CAN ALSO BE 
;;; SET INDIVIDUALLY. THESE RAY ALSO BE THE ATOR ’IGNORE, IN WHICH 
;;; CASE THE CHANGE WILL BE IGNORED. 

(DEFUN TRS-S IGNAL-STATUS-CHANGE (NODE OLDSTATUS NEWSTATUS) 

(COND ((EQ OLDSTATUS NEWSTATUS)) 

((EQ NEWSTATUS ’IN) 

(LET ((RF (TRS-SIGNAL-RECALLING-FUNCTION NODE))) 

(COND ((NULL RF) (STIRULATE (TRS-EXTERNAL-NARE NODE))) 

((EQ RF ’IGNORE)) 

(T (FUNCALL RF (TRS-EXTERNAL-NARE NODE)))))) 

((EQ NEWSTATUS ’OUT) 

(LET ((FF (TRS-SIGNAL-FORGETTING-FUNCTION NODE))) 

(COND ((NULL FF) (DESTIRULATE (TRS-EXTERNAL-NARE NODE))) 

((EQ FF ’IGNORE)) 

(T (FUNCALL FF (TRS-EXTERNAL-NARE NOOE)))))) 

(T (ERROR ’TRS-SIGNAL-STATUS-CHANGE NODE ’WRNG-TYPE-ARG)))) 
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;; THE FOLLOUING FUNCTIONS PERFORM THE PROCESS QUEUE MAINTENANCE OPERATIONS. 

;; THE POSSIBLE CONDITIONS OF R NODE RRE RS FOLLOWS: 

;; IF THE TMS-NOTED-HARK IS NIL, THEN THE NOOE HRS NOT BEEN EXflfllNED BY THE THS 
; $ IF THE THS-STATUS IS NON-NIL, THEN THE NOOE IS QUEUED FOR TfIS PROCESSING* 

(DEFUN TMS-QUEUE (NOOE) 

(CONO ((NOT (TMS-TMP-MRRK NODE)) 

(OR (THS-NOTED-HARK NOOE) 

(ERROR ’INON-NOTED NODE IN TflS-QUEUE | NOOE ’URNG-TYPE-RRG)) 

(HAKE (THS-THP-HRRK NOOE) T) 

(PUSH NOOE *THS-PROCESS-QUEUE*)))) 

(DEFUN TflS-DEQUEUE () 

(LET ((NOOE (POP *TMS-PROCESS-QUEUE*))) 

(CONO (NOOE 

(HAKE (THS-THP-HARK NOOE) NIL) 

NOOE)))) 

;; THIS FUNCTION HARKS AND QUEUES ALL NODES WHICH HIGHT BE 
;; RFFECTEO BY THE CHANGE OF SUPPORT STATUS OF THE ARGUMENT NOOE. 

;; THE STATUS OF THE NOOE BEFORE THE TMS PROCESSING IS ALSO NOTEO 

;; TO ALLOU NOTIFICATION OF STATUS CHANGES AT THE CONCLUSION OF TMS PROCESSING* 

(DEFUN TMS-MARK-AFFECTED-CONSEQUENCES (NOOE) 

(CONO ((NOT (TMS-TMP-MARK NODE)) 

(CONO ((NULL (THS-NOTED-MARK NODE)) 

(MAKE (THS-NOTED-MARK NOOE) T) 

(EQCRSE (THS-SUPPORT-STATUS NODE) 

(IN (PUSH NODE *THS-NOTED-IN-NODES*)) 

(OUT (PUSH NOOE *THS-NOTEO-OUT-NOOES*>) 

(ELSE (ERROR ’|STATUSLESS NODE IN THS-flRRK-AFFECTED-CONSEQUENCES| 

NOOE 

9 URNG-TYPE-RRG))))) 

(HAKE (THS-SUPPORT-STATUS NOOE) NIL) 

(HAKE (THS-SUPPORTING-JUSTIFICATION NOOE) NIL) 

(HAKE (THS-SUPPORTING-NOOES NOOE) NIL) 

(THS-QUEUE NODE) 

(CONS NODE (HAPCAN »THS-HARK-AFFECTED-CONSEQUENCES 

(THS-AFFECTEO-CONSEQUENCES NOOE)))))) 
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(COMMENT SUPPORT-CHECKING FUNCTIONS) 

555 THS-WF-EXAHINE RECURSIVELY CHECKS NODES FOR WELL-FOUNOED SUPPORT. 

;;; THRT IS, IF IT FINDS WELL-FOUNDED SUPPORT FOR R NODE, IT QUEUES UP THE 
;;; CONSEQUENCES OF THE NODE WHICH STILL RRE LOCKING WELL-FOUNDED SUPPORT 
5 5 5 TO SEE IF SUCH SUPPORT CRN NOW BE DERIVEO. 

(DEFUN THS-WF-EXAHINE (NODE) 

(LET ((NEWSTRTUS (THS-WF-STATUS NODE))) 

(COND (NEWSTRTUS 

(COND ((EQ NEWSTRTUS ’IN) (HAKE (THS-SUPPORT-STATUS NODE) ’IN)) 

(T (HRKE (THS-SUPPORT-STATUS NOOE) ’OUT))) 
(THS-INSTRLL-WF-SUPPORT NOOE) 

(HRPC ’(LAHBOA (C) (OR (TfIS-SUPPORT-STRTUS C) (THS-QUEUE C>>> 
(THS-CONSEQUENCES NODE)))))) 

5 55 TMS-NWF-EXRfllNE SELECTS DUBIOUS SUPPORT FOR R NODE. 

55 5 IT CHECKS FOR SUPPORT UNDER THE ASSUflPTION THRT ANY NOOES WITHOUT 
5 55 UELL-FOUNDEO SUPPORT flENTIONEO IN JUSTIFICATIONS ARE OUT. 

;;; PUT ANOTHER WRY, IT EVALUATES JUSTIFICATIONS UNDER THE ASSUflPTION THRT OUT ■ NIL 
5 55 IN SUPPORT-STATUSES FOR NODES. THIS ASSUflPTION HAY NOT BE RIGHT, 

55 ; AND THE NODE’S STATUS MAY LATER BE CHANGED IN THE RELAXATION PROCESS. 

(DEFUN TfIS-NWF-EXRfllNE (NOOE) 

(OR (LET ((STATUS (TflS-WF-STATUS NODE))) 

(COND (STATUS 

(COND ((EQ STATUS ’IN) (MAKE (TT1S-SUPPORT-STATUS NOOE) ’IN)) 
(T (HAKE (TfIS-SUPPORT-STRTUS NODE) ’OUT))) 

(THS-INSTALL-WF-SUPPORT NODE) 

(TfIS-NWF-PROCESS-CONSEQUENCES NOOE STATUS) 

STATUS))) 

(LET ((STATUS (TflS-NWF-STATUS NOOE))) 

(EQCASE STATUS 

(IN (HAKE (TfIS-SUPPORT-STRTUS NODE) ’IN)) 

(OUT (MAKE (TfIS-SUPPORT-STRTUS NODE) ’OUT))) 
(THS-INSTALL-NWF-SUPPORT NOOE) 

(TfIS-NWF-PROCESS-CONSEQUENCES NODE STATUS) 

STATUS))) 

555 THIS FUNCTION CHECKS THE CONSEQUENCES OF NODES FOR WHICH DUBIOUS SUPPORT 
55 ; WAS DERIVED BY TflS-NWF-EXAflINE. IT FIRST TRIES TO CHECK THEfl FOR POSSIBLE 
55 ; WELL-FOUNDED SUPPORT, AND FAILING THAT, SUBfllTS THEfl TO TflS-NUF-EXAHINE 
555 TO CHECK FOR DUBIOUS SUPPORT. 

555 THIS OCCURS BECAUSE IT MAY BE IMPOSSIBLE TO FIND WELL-FOUNDEO SUPPORT 
555 TOR A NODE EITHER BECAUSE IT IS INVOLVED IN A CIRCULARITY, OR BECAUSE 
15 5 IT DEPENDS UPON A NOOE WHICH IS INVOLVED IN A CIRCULARITY. 

(DEFUN TfIS-NWF-PROCESS-CONSEQUENCES (NODE STATUS) 

(COND ((EQ STATUS ’IN) 

(flRPC ’ (LRfIBDA (C) 

(COND ((NULL (TfIS-SUPPORT-STRTUS C)) (TflS-QUEUE C)) 

((MEMO NODE (TflS-SUPPORTING-NODES C)> 

(TflS-flARK-AFFECTED-CONSEQUENCES C)))) 

(THS-CONSEQUENCES NODE))) 

(T (HAPC ’(LAHBDA (C) 

(OR (THS-SUPPORT-STRTUS C) (THS-QUEUE C))) 

(THS-CONSEQUENCES NODE))))) 
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;;; TMS-UF-STATUS COMPUTES THE UELL-FOUNDED SUPPORT STATUS OF 
;;; R NODE FROM BOTH ITS JUSTIFICATION SETS. 

(DEFUN TMS-UF-STATUS (NODE) 

(EQCASE (TMS-UF-SL-SUPPORT NODE) 

(IN ’IN) 

(OUT (TMS-UF-CP-SUPPORT NOOE>) 

(ELSE (AND (EQ (TMS-UF-CP-SUPPORT NODE) 9 IN) ’IN)))) 

;;; TMS-UF-SL-SUPPORT COMPUTES THE UELL-FOUNOEO SUPPORT-STATUS DERIVED 
;;; FROM ITS SUPPORT-LIST JUSTIFICATION SET. 

(DEFUN TMS-UF-SL-SUPPORT (NOOE) 

(DO ((JS (THS-SL-JUSTIFICATIONS NODE) (COR JS>> 

(UF T)> 

((NULL JS) (AND UF ’OUT)) 

(EQCASE (TMS-UF-EVAL-SL-JUSTIFICATION (CAR JS)) 

(YES (RETURN ’IN)) 

(NO) 

(ELSE (SETQ UF NIL))))) 

; j; TMS-UF-CP-SUPPORT COMPUTES THE UELL-FOUNDEO SUPPORT-STATUS 
DERIVED FROM ITS CONDITIONAL-PROOF JUSTIFICATION SET. 

* * *CP 

(DEFUN THS-UF-CP-SUPPORT (NOOE) 

(DO ((JS (THS-CP-JUSTIFICATIONS NOOE) (COR JS)) 

(UF T)> 

((NULL JS) (FIND UF ’OUT)) 

(EQCASE (TNS-UF-EVAL-CP-JUSTIFICRTION (CAR JS)) 

(YES (RETURN ’IN)) 

(NO) 

(ELSE (SETQ UF NIL))))) 

fit TflS-UF-EVRL-SL-JUSTIFICRTION EVALUATES AN SUPPORT-LIST JUSTIFICATION. 

55} THIS HERNS CHECKING TO SEE IF THE JUSTIFICATION IS VRLIO. 

(OEFUN THS-UF-EVAL-SL-JUSTIFICATION (JUST) 

(EQCASE (THS-UF-IN (THS-SL-JUSTIFICATION-INLIST JUST)) 

(YES (THS-UF-OUT (THS-SL-JUSTIFICATION-OUTLIST JUST))) 

(NO ’NO) 

(ELSE NIL))) 

5 5 5 THS-UF-EVAL-CP-JUSTIFICATION EVALUATES A CONDITIONAL-PROOF JUSTIFICATION. 

• * *CP 

(DEFUN TMS-UF-EVAL-CP-JUSTIFICATION (JUST) 

(EQCASE (TMS-UF-IN (TMS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 

(YES (EQCASE (TMS-UF-OUT (TMS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)) 

(YES (EQCASE (TMS-SUPPORT-STATUS 

(TMS-CP-JUSTIFICATION-CONSEQUENT JUST)) 
(IN ’YES) 

(OUT ’NO) 

(ELSE NIL))) 

(ELSE NIL))) 

(ELSE NIL))) 
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;H TMS-UF-IN CHECKS R LIST OF NODES FOR UELL-FOUNDED IN NESS. 

(DEFUN TMS-UF-IN (NOOELIST) 

(DO ((NL NOOELIST (COR NL)) 

(UF T>) 

((NULL NL) (RNO UF ’YES)) 

(EQCRSE (TI1S-SUPPORT-STRTUS (CAR NL)) 

(IN) 

(OUT (RETURN ’NO)) 

(ELSE (SETQ UF NIL))))) 

;;; TMS-UF-OUT CHECKS R LIST OF NODES FOR UELL-FOUNDEO OUTNESS. 

(DEFUN TMS-UF-OUT (NOOELIST) 

(DO ((NL NOOELIST (COR NL)) 

(UF T)) 

((NULL NL) (RNO UF ’YES)) 

(EQCRSE (TnS-SUPPORT-STRTUS (CAR NL)) 

(IN (RETURN ’NO)) 

(OUT) 

(ELSE (SETQ UF NIL))))) 

;;; TMS-NUF-STRTUS COMPUTES THE (PERHAPS UNFOUNDED) SUPPORT-STATUS OF R NOOE. 

;;; THIS HERNS EVALUATING JUSTIFICATIONS, ETC. UNDER THE ASSUMPTION THAT 
J55 A SUPPORT STATUS OF NIL IS EQUIVALENT TO A SUPPORT STATUS OF OUT. 

(DEFUN TfIS-NUF-STATUS (NODE) 

(EQCRSE (TMS-NUF-SL-SUPPORT NOOE) 

(IN ’IN) 

(OUT (EQCRSE (THS-UF-CP-SUPPORT NOOE) 

(IN (ERROR ’TMS-NUF-STRTUS NOOE ’URNG-TYPE-ARG) ’OUT) 
(OUT ’OUT) 

(ELSE ’OUT))))) 

;;; TMS-NUF-SL-SUPPORT COMPUTES THE SUPPORT-STATUS OF A NOOE FROM ITS 
;;; SUPPORT-LIST JUSTIFICATION SET BY EQUATING ’OUT RNO NIL. 

ITS SUBFUNCTIONS ARE ANALOGOUS TO THE UELL-FOUNDEO CASE FUNCTIONS ABOVE. 

(DEFUN TMS-NUF-SL-SUPPORT (NOOE) 

(DO ((JS (TMS-SL-JUSTIFICATIONS NODE) (COR JS))) 

((NULL JS) ’OUT) 

(AND (TMS-NUF-EVAL-SL-JUSTIFICATION (CAR JS)) 

(RETURN ’IN)))) 

(DEFUN TMS-NUF-EVAL-SL-JUSTIFICATION (JUST) 

(AND (TMS-NUF-IN (TMS-SL-JUSTIFICATION-INLIST JUST)) 

(TMS-NUF-OUT (THS-SL-JUSTIFICATION-OUTLIST JUST)))) 

(DEFUN TMS-NUF-IN (NODELIST) 

(DO ((NL NODELIST (CDR NL))) 

((NULL NL) T) 

(OR (TMS-IS-IN (CAR NL)) (RETURN NIL)))) 

(DEFUN TMS-NUF-OUT (NOOELIST) 

(00 ((NL NODELIST (COR NL))) 

((NULL NL) T) 

(AND (TMS-IS-IN (CAR NL)) (RETURN NIL)))) 
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(COMMENT SUPPORT-EXTRACTION FUNCTIONS) 

m THIS FUNCTION IS COMPLETELY HAIRY AS IT TRIES TO FIRST CHECK TO SEE IF 
;;; ANY NEW SL JUSTIFICATIONS CAN BE DERIVED FROM CP JUSTIFICATIONS, 

;;; IT THEN INSTALLS THE FIRST VALID SL JUSTIFICATION IT CAN FINO AS THE 
;;; SUPPORTING-JUSTIFICATION OF THE NOOE, AND EXTRACTS THE APPROPRIATE 
;;; SUPPORTING NODES. 

;;; THERE IS A CRUCIAL TIME OROERING USED HERE. 

;;; RATHER THAN HAVING THE FUNCTIONS WHICH CHECK THE SET OF JUSTIFICATIONS 
;;; FOR A VALID JUSTIFICATION RETURN THAT JUSTIFICATION, THIS PROGRAM MAKES 
;;; SURE THAT THAT CHECKING OF THE JUSTIFICATION SETS IS DONE IN A PARTICULAR 
;;; ORDER (SL-JUSTIFICATIONS FIRST, THEN CP-JUSTIFICATIONS.) 

;;; THE REASON FOR THIS IS THAT THE EXTRACTION ROUTINES BELOW, WHICH COMPUTE 
;;; A HOPEFULLY MINIMAL SET OF NODES WHICH DETERMINE THE SUPPORT STATUS 
;;; OF THE CURRENT NODE (EITHER IN OR OUT). THE DECISION OF WHICH SET TO 
;;; EXTRACT DEPENDS UPON WHETHER THE NOOE IS IN OR OUT. 

;;; THUS THE STATUS CHECKING FUNCTIONS ABOVE COMPUTE NO SUPPORT SETS. 

;;; THIS TASK IS LEFT TO THE FOLLOWING FUNCTIONS. 

;;; TMS-INSTALL-WF-SUPPORT USES THE FIRST VALID JUSTIFICATION FOUND 

;;; IN A REPETITIVE CHECKING OF THE JUSTIFICATION SETS AS THE SUPPORTING 

;;; JUSTIFICATION, SINCE THIS IS THE FIRST VALIO JUSTIFICATION WHICH WAS ENCOUNTERED 

;;; BY THE STATUS CHECKING ROUTINES. 

;;; NOTE: THE LOGICAL NECESSITY OF THESE REPETITIVE CHECKS ALL OVER THE 
;;; PLACE FOR OPPORTUNITIES TO DO FINDINDEPS SHOULD BE THOUGHT OUT 

;;; CAREFULLY, AND THE CODE REORGANIZED. ALSO, THERE IS SOME 

;;} SUPERFLUOUS STUFF IN THE EXTRACTION FUNCTIONS BELOW. 

., .cp 

(DEFUN THS-INSTflLL-UF-SUPPORT (NODE) 

(DO ((JS (TnS-CP-JUSTIFICRTIONS NODE) (COR JS)>) 

((NULL JS)) 

(EQCRSE (THS-UF-EVAL-CP-JUSTIFICATION (CAR JS)) 

(YES (LET ((SUPPORT (TtlS-FINDINDEP 

(TtlS-CP-JUSTIFICATION-CONSEQUENT (CAR JS)) 

(TflS-CP-JUST IF I CRT I ON-1N-H YPOTHESES (CAR JS)) 

(THS-CP-JUSTIFICATION-OUT-HYPOTHESES (CAR JS))))) 

(LET ((JUST (TflS-NAKE-SL-JUSTIFICATION 

(CAR SUPPORT) 

(CDR SUPPORT) 

(TNS-JUSTIFICATION-ARCUNENT (CAR JS)))) 

(OJS (TNS-SL-JUSTIFICATIONS NOOE))) 

(AND (NOT (TnS-SL-JUSTIFICATION-tlENBER JUST OJS)) 

(HAKE (TNS-SL-JUSTIFICATIONS NOOE) 

(NCONC OJS (LIST JUST))))))) 

(ELSE))) 

(DO ((JS (TNS-SL-JUSTIFICATIONS NOOE) (COR JS))) 

((NULL JS) 

(HAKE (THS-SUPPORTING-JUSTIFICATION NOOE) NIL) 

(HAKE (TNS-SUPPORTINC-NOOES NODE) 

(TNS-NOOE-SET-CONOENSE 

(NCONC (HAPCAN *(LAHBOA (J) (TNS-HF-SL-JUSTIFICATION-EXTRACT J>) 

(TNS-SL-JUSTIFICATIONS NODE)) 

(HAPCAN ’(LAHBOA (J) (TNS-UF-CP-JUSTIFICATION-EXTRACT J)> 
(TNS-CP-JUSTIFICATIONS NODE)))))) 

(EQCASE (THS-MF-EVAL-SL-JUSTIFICATION (CAR JS)) 

(YES (HAKE (THS-SUPPORTING-JUSTIFICATION NOOE) (CAR JS)> 

(HAKE (TNS-SUPPORTING-NOOES NOOE) 

(APPEND (THS-SL-JUSTIFICATION-INLIST (CAR JS)) 
(THS-SL-JUSTIFICATION-OUTLIST (CAR JS)) 

NIL)) 

(RETURN NIL)) 

(ELSE)))) 
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;;; IF THE NOOE IS BEING GIVEN DUBIOUS SUPPORT BY THE NOT-UELL-FOUNDED 

;;; RELAXATION PROCESS, THIS FUNCTION IS USED INSTEAD OF THS-INSTALL-UF-SUPPORT. 

(DEFUN THS-INSTALL-NUF-SUPPORT (NOOE) 

(DO ((JS (THS-SL-JUSTIFICATIONS NOOE) (COR JS))) 

((NULL JS) 

(HAKE (THS-SUPPORTING-JUSTIFICATION NODE) NIL) 

(HAKE (THS-SUPPORTING-NODES NODE) 

(THS-NOOE-SET-CONDENSE 

(NCONC 

(HAPCAN 9 (LAflBDA (J) (THS-NUF-SL-JUSTIFICATION-EXTRACT J)) 
(TfIS-SL-JUSTIFICATIONS NODE)) 

(HAPCAN ’(LAHBOA (J) (THS-NUF-CP-JUSTIFICATIQN-EXTRACT J)) 

(THS-CP-JUSTIFICATIONS NOOE)))))) 

(COND ((THS-NUF-EVAL-SL-JUSTIFICATION (CAR JS)) 

(HAKE (THS-SUPPORTING-JUSTIFICATION NOOE) (CAR JS)) 

(HAKE (THS-SUPPORTING-NOOES NODE) 

(THS-NOOE-SET-CONDENSE (THS-NUF-SL-JUSTIFICATION-EXTRACT (CAR JS)>>) 
(RETURN NIL))))) 

;;; THESE FUNCTIONS ARE USED TO EXTRACT A HOPEFULLY SHALL SET OF NODES AS THE 
55 ; SET OF SUPPORTING NODES OF THE NODE. THE EXTRACTED NODES ARE ONES THAT MUST 
;;; BE CHANGED TO AFFECT THE STATUS OF THE SUPPORTED NODE. 

;;; IF THE JUSTIFICATION IS VALID, THIS RETURNS THE UNION OF THE IN AND OUT SETS OF NOOES 
;;; HENTIONEO IN THE JUSTIFICATION. IF THE JUSTIFICATION IS INVALIO, IT RETURNS EITHER 
; 5; AN OUT NODE FROH THE INLIST, OR A IN NOOE FROH THE OUTLIST. 

(DEFUN THS-UF-SL-JUSTIFICATION-EXTRACT (JUST) 

(EQCASE (THS-MF-IN (THS-SL-JUSTIFICATION-INLIST JUST)) 

(YES (EQCASE (THS-UF-OUT (THS-SL-JUSTIFICATION-OUTLIST JUST)) 

(YES (APPEND (THS-SL-JUSTIFICATION-INLIST JUST) 

(THS-SL-JUSTIFICATION-OUTLIST JUST) 

NIL)) 

(NO (THS-UF-OUT-EXTRACT (THS-SL-JUSTIFICATION-OUTLIST JUST))) 
(ELSE NIL))) 

(NO (THS-MF-IN-EXTRACT (THS-SL-JUSTIFICATION-INLIST JUST))) 

(ELSE NIL))) 

;;; I DON’T KNOU UHAT THIS DOES ANYHORE. 


) 5»CP 

(DEFUN THS-UF -CP-JUSTIFI CATION-EXTRACT (JUST) 

(EQCASE (THS-UF-IN (THS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 

(YES (EQCASE (THS-UF-OUT (THS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)) 

(YES (EQCASE (THS-SUPPORT-STATUS 

(THS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

(IN (ERROR ’THS-HF-CP-JUSTIFICATI ON-EXTRACT 
JUST ’URNG-TYPE-ARG) NIL) 

(OUT (LIST (THS-CP-JUSTIFICATION-CONSEQUENT JUST))) 
(ELSE NIL))) 

(NO (ERROR 9 THS-UF-CP-JUSTIFICATION-EXTRRCT-OUTS 
JUST ’URNG-TYPE-ARG) NIL) 

(ELSE NIL))) 

(NO (ERROR 9 THS-UF -CP-JUSTIF I CAT I ON-EXTRACT-1 NS JUST ’URNG-TYPE-ARG) NIL) 
(ELSE NIL))) 
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;;; THIS RETURNS THE ENTIRE LIST OF NODES IF ALL ARE IN, 

;;; OR THE FIRST OUT NODE IF THERE IS ONE. 

(DEFUN THS-UF-IN-EXTRACT (NOOELIST) 

(DO <(NL NODELIST (COR NL)) 

(UF T)) 

((NULL NL) (AND UF (APPEND NODELIST NIL))) 

(EQCASE (THS-SUPPORT-STATUS (CAR NL)) 

(IN) 

(OUT (RETURN (LIST (CAR NL)))) 

(ELSE (SETQ UF NIL))))) 

;;; THIS RETURNS THE ENTIRE LIST OF NODES IF ALL ARE OUT, 

;;; OR THE first in node if there is one. 

(DEFUN THS-UF-OUT-EXTRACT (NOOELIST) 

(DO ((NL NOOELIST (CDR NL)) 

(UF T)) 

((NULL NL) (AND UF (APPEND NODELIST NIL))) 

(EQCASE (THS-SUPPORT-STATUS (CAR NL)) 

(IN (RETURN (LIST (CAR NL)))) 

(OUT) 

(ELSE (SETQ UF NIL))))) 

THESE FUNCTIONS ARE ANALOGOUS TO THE CORRESPONDING UELL-FOUNOEO CASE FUNCTIONS ABOVE, 
n; THE ONLY REAL DIFFERENCE IS THAT NIL IS CONSIDERED OUT IN SUPPORT STATUSES. 

(DEFUN THS-NUF-SL-JUSTIFICATION-EXTRACT (JUST) 

(COND ((THS-NUF-IN (THS-SL-JUSTIFICATION-INLIST JUST)) 

(COND ((THS-NUF-OUT (THS-SL-JUSTIFICATION-OUTLIST JUST)) 

(APPEND (THS-SL-JUSTIFICATION-INLIST JUST) 
(THS-SL-JUSTIFICATION-OUTLIST JUST) 

NIL)) 

(T (THS-NUF-OUT-EXTRACT (THS-SL-JUSTIFICATION-OUTLIST JUST))))) 

(T (THS-NUF-IN-EXTRACT (THS-SL-JUSTIFICATION-INLIST JUST))))) 


.. .CP 

(DEFUN THS-NUF-CP-JUSTIFICATION-EXTRACT (JUST) 

(CONO ((THS-NUF-IN (THS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 

(COND ((THS-NUF-OUT (THS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)) 

(COND ((THS-IS-IN (THS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

(APPEND (THS-CP-JUSTIFICATION-IN-HYPOTHESES JUST) 

(THS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST) 

(LIST (THS-CP-JUSTIFICATION-CONSEQUENT JUST)))) 

(T (LIST (THS-CP-JUSTIFICATION-CONSEQUENT JUST))))) 

(T (THS-NUF-OUT-EXTRACT (THS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST))))) 
(T (THS-NUF-IN-EXTRACT (THS-CP-JUSTIFICATION-IN-HYPOTHESES JUST))))) 

(DEFUN THS-NUF-IN-EXTRACT (NOOELIST) 

(DO ((NL NODELIST (CDR NL))) 

((NULL NL) (APPEND NOOELIST NIL)) 

(OR (THS-IS-IN (CAR NL)) (RETURN (LIST (CAR NL)))))) 

(DEFUN THS-NUF-OUT-EXTRACT (NOOELIST) 

(DO ((NL NOOELIST (CDR NL))) 

((NULL NL) (APPEND NODELIST NIL)) 

(AND (THS-IS-IN (CAR NL)) (RETURN (LIST (CAR NL)))))) 
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CCOMMENT DEPENDENCY-DIRECTED BACKTRACKING SYSTEM) 

>; $ TMS-CONTRADICTION IS THE FUNDAMENTAL METHOD FOR DECLARING A SET 
;;; A SET OF NOOES CONTRADICTORY. THE ARGUMENTS ARE A CONTRADICTION 
;;; TYPE, UHICH IS A MNEMONIC SYMBOL, A LIST OF NODES TO BE USED AS 
;;; THE SUPPORT OF THE CONTRADICTION, AND THE EXTERNAL ARGUMENT FOR 
55 j THE CONTRADICTION, AS IN THS-SL-JUSTIFY. THE FINAL ARGUMENT IS THE 
55 ; CONTRADICTION FUNCTION TO BE CALLEO WHEN NO ASSUMPTIONS CAN BE FOUND. 

(DEFUN TMS-CONTRADICTION (CTYPE SUPPORT EXTARG CFUN) 

(LET ((CONT (TMS-MAKE-FACT ’CONTRADICTION "(,CTYPE CONTRADICTION)))) 

(LET ((CNODE (TMS-FACT-NODE CONT))) 

(TMS-SL-JUSTIFY CNODE SUPPORT NIL EXTARG) 

(TMS-PROCESS-CONTRADICTION CONT CNODE CTYPE CFUN) 

CNODE))) 

5;; TMS-PROCESS-CONTRADICTION DIRECTS THE BACKTRACKING PROCESS. 

555 ITS ARGUMENTS ARE THE CONTRADICTION NAME, THE CONTRADICTION NODE, 

555 THE CONTRADICTION TYPE, AND THE CONTRADICTION FUNCTION. IF NO 
55 ; CONTRADICTION FUNCTION IS SUPPLIED, IT IS IGNOREO. 

5;; THE THEORY OF BACKTRACKING IN THIS FUNCTION IS AS FOLLOWS: 

5 5 5 THERE ARE 4 FLAVORS OF NOOES AS FAR AS THE BACKTRACKER IS CONCERNED: 

55 ? ASSUMPTIONS — SUPERIORLESS IN NODES SUPPORTED BY OUT NOOES. 

5 ; 5 SUSPECTS — OUT NODES SUPPORTING ASSUMPTIONS. 

55 ; IN-SUPPORT — NOOES WHICH ARE IN INDEPENDENT OF ANY SUSPECTS. 

555 OUT-SUPPORT — NOOES WHICH ARE OUT INDEPENDENT OF ANY SUSPECTS. 

5 5 5 BOTH TYPES OF INDEPENDENT SUPPORT ARE COLLECTEO BY CALLING TMS-FINOINDEP 
555 ON THE CONTRADICTION AND THE LIST OF ASSUMPTIONS. 

55 ; *TMS-C0NTRADICTI0N-ASSUHPTI0NS# IS A LIST OF PAIRS OF ASSUMPTIONS AND THEIR SUSPECTS. 

(DEFUN TMS-PROCESS-CONTRADICTION (CONT CNODE CTYPE CFUN) 

(LET (UTMS-NOTED-IN-NODES# NIL) 

UTMS-NOTEO-OUT-NOOES* NIL)) 

(TMS-PROCESS-CONTRADICTION1 CONT CNODE CTYPE CFUN) 

(TMS-TMP-SCAN) 

(TMS-SIGNAL-CHANGES))) 

(DEFUN TMS-PROCESS-CQNTRADICTION1 (CONT CNODE CTYPE CFUN) 

(MAKE (TMS-CONTRAOICTION-MARK CNODE) T) 

(MAKE (TMS-CONTRAOICTION-NAHE CNODE) CONT) 

(MAKE (TMS-CONTRAOICTION-TYPE CNODE) CTYPE) 

(AND CFUN (MAKE (TMS-CONTRAOICTION-FUNCTION CNODE) CFUN)) 

(ANO (TMS-IS-IN CNODE) 

(LET ((#TMS-CONTRADICTION-ASSUMPTIONS* NIL)) 

• (COND ((THS-FINDCHOICES CNOOE) 

(COND (#TMS-SEE-CONTRADICTIONS-SW# 555 NOTIFY USER OF CONTRADICTION? 
(TERPRI) 

(PRINC ’(CONTRADICTION: |) 

(PRINI CONT) 

(PRINC *| |) 

(PRIN1 CTYPE) 

(COND (#TMS-SEE-CULPRITS-SW# 555 PRINT A LIST OF ALL ASSUMPTIONS? 

(TERPRI) 

(PRINC ’|SUSPECTS: |) 

(MAPC ’(LAMBDA (N) (TMS-PRINT ’| | (CAR N>>> 

#TMS-CONTRADICTION-ASSUMPTIONS#) 

(TERPRI)) 

(T (PRINC ’| |))> 

(PRINC ’(CULPRIT: |) 

(PRINI (TMS-EXTERNAL-NAME 

(CAAR *TMS-CONTRADICTION-ASSUMPTIONS*))) 

(TERPRI))) 

5 ;; THE FOLLOWING WILL CAUSE TRUTH MAINTENANCE, AND WILL RESULT 
55 ; IN ONE OF THE ASSUMPTIONS OR CHOICES BEING CHANGED 
(TMS-CONTRADICTION-ASSERT-NOGOOD CNOOE) 

’FOUND-A-CULPRIT) 

5 5 J IT THERE WERE NO UNDERLYING ASSUMPTIONS FOUND, 

5»5 CALL THE USER’S CONTRADICTION HANDLING FUNCTION IF IT EXISTS. 

(T (AND (TMS-CONTRAOICTION-FUNCTION CNOOE) 

(FUNCALL (TMS-CONTRAOICTION-FUNCTION CNODE) 

(TMS-EXTERNAL-NAME CNODE))) 

’FOUND-NO-CHOICES))))) 
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;;? CONTRRDICTION-RSSERT-NOGOOD MAKES UP THE NOGOOD FOR A GIYEN CONTRADICTION. 

;;; NOGOODS RRE IMPLEMENTED RS DEPENDENCY RELATIONSHIPS, IN CONTRAST TO ARS, 

;;; SO THAT NO EXPLICT NOGOOD CHECKING IS NECESSARY - THE TRUTH MAINTENANCE 
SYSTEH PERFORMS THAT TASK. THUS IT IS KNOUN THAT NO FORMER SUSPECTS 
; j; THAT ARE OUT AT THE TIME OF A CONTRADICTION (OR ANY OTHER TIME) 

;;$ ARE IN CONFLICT UITH A NOGOOD SET, FOR A NOGOOO SET UOULD CAUSE A 
;;; SUSPECT NODE TO BE IN. 

;;; NOTE THAT OUTSIDE OF THE NOGOOD ITSELF, ONLY ONE NEU JUSTIFICATION IS 

;;; CREATED FOR OUT NODES SUPPORTING ASSUMPTIONS. THE NEU JUSTIFICATION 

;;; UILL NULLIFY THE CURRENT JUSTIFICATION OF THE FIRST ASSUMPTION ON THE LIST. 

;;; IF THAT ASSUMPTION HAS NO OTHER VALID SUPPORT, IT UILL GO OUT AND THE CONTRADICTION 
;;; SHOULD GO OUT AS UELL. IF THE ASSUMPTION IS STILL IN OUE TO OTHER SUPPORT, 

;;; OR IF THE CONTRADICTION HAS OTHER SUPPORT, BACKTRACKING UILL BE INVOKED 
;;; AGAIN BY THE TMS-TMP-SCAN LOOP. THUS OTHER NEU JUSTIFICATIONS MAY BE ADOEO 
;;; LATER FOR THE OTHER ASSUMPTIONS SUPPORTING THE CONTRADICTION. 

(DEFUN TMS-CONTRADICTION-ASSERT-NOGOOO (CNOOE) 

(LET ((AL (MAPCAR ’CAR *TMS-CONTRADICTION-ASSUMPTIONS*))) 

(LET ((NOGOODF 

(TMS-MAKE-FACT 

’NOGOOD 

"(NOGOOD . ,(MAPCAR ’(LAMBDA (N) (TMS-EXTERNAL-NAME N)> AL))))) 

(LET ((NOGOOD (TMS-FACT-NOOE NOGOODF))) 

(MAKE (THS-NOGOOD-CONTRADICTION NOGOOD) CNOOE) 

(MAKE (TMS-NOGOOO-ASSUMPTIONS NOGOOO) AL) 

(MAKE (TMS-CONTRADICTION-NOGOODS CNOOE) 

(CONS NOGOOO (TMS-CONTRADICTION-NOGOOOS CNOOE))) 

. . .Qp 

THIS COULD BE REPLACED BY A CALL TO TMS-FINDINDEP TO CONSTRUCT A NEU JUSTIFICATION. 

(TMS-CP-JUSTIFY1 NOGOOO CNOOE AL NIL 

"(NOGOOO FOR ,(TMS-EXTERNAL-NAME CNOOE))) 

(LET UP (CAR #TMS-CONTRADICTION-ASSUMPTIONS)) 

(A (CAR AL))) 

(TMS-SL-JUSTIFY1 (CADR P) 

"(,NOGOOO t(DELQ A (APPEND AL NIL))) 

(CDDR P) 

"(CULPRIT ,NOGOODF))))))) 
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055 
056 
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058 
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;;; TMS-FINDCHOICES HARKS THE SUPPORT OF A CONTRADICTION TO FIND THE RELEVANT CHOICES, 

;;; IT TRIES TO RETURN THE MAXIMAL ASSUMPTIONS. THESE ARE THE ASSUMPTIONS INVOLVED 
;;; IN THE WELL-FOUNDED SUPPORT OF THE CONTRADICTION ON WHICH NO OTHER ASSUMPTIONS 
;;; IN THE WELL-FOUNDED SUPPORT DEPEND. THIS IS TO AVOIQ THROWING AWAY MORE INFORMATION 
;;; THAN IS NECESSARY. ALSO, IT IS PRAGMATICALLY USEFUL, SINCE THERE MAY NOT BE ENOUGH 
;;; INFORMATION TO LOGICALLY RULE OUT A NON-MAXIMAL ASSUMPTION. THE RULING OUT OF THE 
;;; ASSUMPTION MUST INVOLVE THE NODE THAT THE OTHER ASSUHTIONS ARE STILL IN: BUT IF THEY 
i}; ARE SUPPORTED BY THE RULED-QUT ASSUMPTION, THEY MILL GO OUT ANO THE ASSUMPTION MILL 
;;; NO LONGER BE RULED OUT. 

55 5 THE TMS-SUPERIORS-MARK OF A NODE IS 
;;; 'YES IF SOME CHOICE DEPENDS ON THE NODE 

;;; 'NO IF NO CHOICE DEPENDS ON THE NODE 

55 ; NIL IF THE NODE HAS NOT BEEN MARKEO YET. 

(DEFUN TMS-FINDCHOICES (NODE) 

(TMS-FINDCHOICES1 NODE NIL) 

5 5 5 THE FOLLOWING HEEDS OUT ANY SUBORDINATE ASSUMPTIONS SPURIOUSLY INCLUOEO 
;;; IN THE LIST DUE TO CHRONOLOGICAL ACCIOENTS IN TMS-FINOCHOICES 1 
(SETQ *TMS-CONTRADICTION-ASSUMPTIONS* 

(HAPCAN '(LAMBDA (S) (AND (EQ (TMS-SUPERIORS-MARK (CAR S>> 'NO) (LIST S>>> 
♦TMS-CONTRADICTION-ASSUMPTIONS#)) 

5 ;; CLEANUP THE MARKS MAOE BY TMS-F I NDCHO I CES 1 
(TMS-FINDCH0ICES2 NODE) 

;;;RETURN AN INDICATION OF WHETHER THERE MERE ANY ASSUMPTIONS. 

(NOT (NULL *TMS-CONTRADICTION-ASSUMPTIONS*))) 

(DEFUN TMS-FINDCHOICES 1 (NODE SUPERIORSP) 

5 5 5 SUPERIORSP IS WHETHER THE NODE HAS CHOICES ABOVE 
(EQCASE (TMS-SUPERIORS-MARK NOOE) 

(YES) 

(NO (COND (SUPERIORSP ;;; REVISIONS MUST BE PROPAGATED DOWNWARDS* 

(MAKE (TMS-SUPERIORS-MARK NODE) 'YES) 

(MAPC ’(LAMBDA (A) (TMS-FINDCHOICES 1 A SUPERIORSP)) 

(TMS-ANTECEOENTS NODE))))) 

(ELSE 

(COND (SUPERIORSP (MAKE (TMS-SUPERIORS-MARK NOOE) ’YES)) 

(T (MAKE (TMS-SUPERIORS-MARK NOOE) ’NO))) 

(LET ((OUT-SUPPORT (MAPCAN ' (LAMBOA (N) (AND (TMS-IS-OUT N) (LIST N))) 

<TMS-ANTECEOENTS NODE)))) 

(AND OUT-SUPPORT 

(COND ((NOT SUPERIORSP) 

5 5 5 ONLY SUPERIORLESS CHOICES ARE COLLECTED. 

;;; THIS MAY COLLECT ASSUMPTIONS UHICH ARE SUBORDINATE. 

(SETQ SUPERIORSP T) 

(PUSH (CONS NODE OUT-SUPPORT) 

*TMS-CONTRADICTION-ASSUMPTIONS*)))) 

(MAPC '(LAMBDA (A) (TMS-FINDCHOICES1 A SUPERIORSP)) 

(TMS-ANTECEOENTS NODE)))))) 

(DEFUN TMS-FINDCH0ICES2 (NOOE) 

(COND ((TMS-SUPERIORS-MARK NODE) 

(MAKE (TMS-SUPERIORS-MARK NODE) NIL) 

(MAPC 'TMS-FINDCHOICES2 (TMS-ANTECEOENTS NODE))))) 
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